mdasilva

[Unit]
Description=consul server
Requires=network-online.target
After=network-online.target

[Service]
User=consul
Group=consul
Restart=on-failure
PIDFile=/run/consul/consul.pid

mdasilva

JENKINS MASTER                                                                                                       USER1
+---------------------+                                                                                              USER2 USER3
|                     |                  DOCKER HOST 1
| system config       |     2375/TCP     +--------------------------------------+                                       +    +
|      docker plugin  +------------------+                                      |                                       |    |
+---------------------+                  |  CONTAINER 1                         |                     FW ephemeral/TCP  |    |
| project A           |                  |  +--------------------------------+  |                              +--------------------+
|                     |    80/443/TCP    |  |                                |  |                                       |    |
|  build #1  <--------------------------------+ jnlp agent                 

mdasilva

[desilm1@fcodopapp1 /opt/jfrog/artifactory]$ tree
.
├── bin
│   ├── artifactory.bat
│   ├── artifactoryctl
│   ├── artifactory.default
│   ├── artifactoryManage.sh
│   ├── artifactory-service.exe
│   ├── artifactory.sh
│   ├── configure.mysql.sh

mdasilva

Business Capability teams

Typical Role Composition

• Product owner
• Designer
• Tester(s)
• Developers (1-3 pairs)

mdasilva

# Add an OU to hold user accounts
dn: ou=users,dc=example,dc=org
changeType: add
objectClass: organizationalUnit
description: Organization users
ou: users

# Add an OU to hold roles
dn: ou=roles,dc=example,dc=org
changeType: add

mdasilva

Setup Consul with ACL

This will setup a single node Consul cluster. Development mode is not used in order to allow data persistence. We'll be interacting with the Consul server from within the container for simplicity.

Create Consul configuration and persistent data directories

$ mkdir p consul/config consul/data

mdasilva

Setup Consul with ACL

This will setup a single node Consul cluster. Development mode is not used in order to allow data persistence. We'll be interacting with the Consul server from within the container for simplicity.

Create Consul configuration and persistent data directories

$ mkdir p consul/config consul/data

mdasilva

Setup Consul with ACL

This will setup a single node Consul cluster. Development mode is not used in order to allow data persistence. We'll be interacting with the Consul server from within the container for simplicity.

Create Consul configuration and persistent data directories

$ mkdir p consul/config consul/data

mdasilva

Vault Secret Management

Vault is a tool for securely accessing secrets. In this guide we'll be standing up development instances of Vault and Consul to illustrate features such as;

• Dynamic secret generation
• LDAP authentication
• Policy based authorization

Before you get started

mdasilva

Vault Secret Management

Vault is a tool for securely accessing secrets. In this guide we'll be standing up development instances of Vault and Consul to illustrate features such as;

• Dynamic secret generation
• LDAP authentication
• Policy based authorization

Before you get started