Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Owner onboarding and Serviceinfo API server AuthN #730

Open
rprakashg-redhat opened this issue Feb 2, 2025 · 0 comments
Open

Owner onboarding and Serviceinfo API server AuthN #730

rprakashg-redhat opened this issue Feb 2, 2025 · 0 comments

Comments

@rprakashg-redhat
Copy link

rprakashg-redhat commented Feb 2, 2025

Currently Owner onboarding server authenticates with ServiceInfo API server using a shared Bearer Token hard coded in the config file. It would be nice to have some integration to secure keyvault so the bearer token can be stored and read from the vault.
For Ex When deploying in AWS.
We could create an instance of AWS secrets manager and allow the instance running Owner server to read secrets stored in secrets manager using in AWS IAM policy. Config should provide a mechanism to inject the ARN of secrets manager. When Onboarding communicates with ServiceInfo read the token from secrets manager.
This also allows easy rotation of tokens without having to update config and restart server

There should also be an option to integrate with an external oidc provider so that owner could get a short living token to authenticate itself with the service info api server

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant