Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide authorization for Agents connecting to Consul #76

Open
DImuthuUpe opened this issue Jan 25, 2023 · 0 comments
Open

Provide authorization for Agents connecting to Consul #76

DImuthuUpe opened this issue Jan 25, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@DImuthuUpe
Copy link
Contributor

MFT Agents communicate with the controller through the consul key-value store. https://github.com/apache/airavata-mft/blob/master/common/common-clients/src/main/java/org/apache/airavata/mft/admin/MFTConsulClient.java Consul keys are represented through paths and each agent has its own path to access messages. Currently there is no mechanism to control access to those paths as anyone can read from it. We can use the Access Control setup provided through consul to enforce authorization for agent communication. https://developer.hashicorp.com/consul/tutorials/security/access-control-setup-production The idea is,

  1. No open access to any consul path is provided. All communication should happen through Consul tokens.
  2. When an agent needs to connect to consul, it is give a consul token and agent can only access a particular path using that token.
@DImuthuUpe DImuthuUpe added the enhancement New feature or request label Jan 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant