Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

infra: add a vault container and scaffolding #8922

Merged
merged 6 commits into from
Dec 29, 2020

Conversation

woodruffw
Copy link
Member

@woodruffw woodruffw commented Dec 14, 2020

I broke this out of my local changes to #7488.

It sets up a new development container, vault, running an instance of Hashicorp Vault. A single (root) token is used everywhere for simplicity.

This PR doesn't contain any of the Pyramid-level service work needed to interact with the Vault service via transit. I'll break my local work into a follow-up PR for that.

docker-compose.yml Outdated Show resolved Hide resolved
Copy link
Member

@ewdurbin ewdurbin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since we will need to encode retries and resilience into the client anyway, this looks ready to go even without links/dependency managed by docker-compose

@woodruffw
Copy link
Member Author

Since we will need to encode retries and resilience into the client anyway, this looks ready to go even without links/dependency managed by docker-compose

Yep -- part of the local deployment process for TUF also involves running make inittuf to fill Vault with signing keys and perform the initial backfill, so this isn't any more or less broken than Warehouse's state prior to make initdb already is 🙂

@woodruffw woodruffw changed the title WIP: infra: add a vault container and scaffolding infra: add a vault container and scaffolding Dec 14, 2020
@ewdurbin ewdurbin merged commit 3cb1fad into pypi:master Dec 29, 2020
@woodruffw woodruffw deleted the ww/tuf-vault-infra branch December 29, 2020 16:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants