Michael Da Silva mdasilva

Business Capability teams

Typical Role Composition

Product owner
Designer
Tester(s)
Developers (1-3 pairs)

Setup Consul with ACL

This will setup a single node Consul cluster. Development mode is not used in order to allow data persistence. We'll be interacting with the Consul server from within the container for simplicity.

Create Consul configuration and persistent data directories

$ mkdir p consul/config consul/data

Setup Consul with ACL

This will setup a single node Consul cluster. Development mode is not used in order to allow data persistence. We'll be interacting with the Consul server from within the container for simplicity.

Create Consul configuration and persistent data directories

$ mkdir p consul/config consul/data

Setup Consul with ACL

This will setup a single node Consul cluster. Development mode is not used in order to allow data persistence. We'll be interacting with the Consul server from within the container for simplicity.

Create Consul configuration and persistent data directories

$ mkdir p consul/config consul/data

Vault Secret Management

Vault is a tool for securely accessing secrets. In this guide we'll be standing up development instances of Vault and Consul to illustrate features such as;

Dynamic secret generation
LDAP authentication
Policy based authorization

Before you get started

Vault Secret Management

Vault is a tool for securely accessing secrets. In this guide we'll be standing up development instances of Vault and Consul to illustrate features such as;

Dynamic secret generation
LDAP authentication
Policy based authorization

	[Unit]
	Description=consul server
	Requires=network-online.target
	After=network-online.target

	[Service]
	User=consul
	Group=consul
	Restart=on-failure
	PIDFile=/run/consul/consul.pid

	JENKINS MASTER USER1
	+---------------------+ USER2 USER3
	\| \| DOCKER HOST 1
	\| system config \| 2375/TCP +--------------------------------------+ + +
	\| docker plugin +------------------+ \| \| \|
	+---------------------+ \| CONTAINER 1 \| FW ephemeral/TCP \| \|
	\| project A \| \| +--------------------------------+ \| +--------------------+
	\| \| 80/443/TCP \| \| \| \| \| \|
	\| build #1 <--------------------------------+ jnlp agent

	[desilm1@fcodopapp1 /opt/jfrog/artifactory]$ tree
	.
	├── bin
	│ ├── artifactory.bat
	│ ├── artifactoryctl
	│ ├── artifactory.default
	│ ├── artifactoryManage.sh
	│ ├── artifactory-service.exe
	│ ├── artifactory.sh
	│ ├── configure.mysql.sh

	# Add an OU to hold user accounts
	dn: ou=users,dc=example,dc=org
	changeType: add
	objectClass: organizationalUnit
	description: Organization users
	ou: users

	# Add an OU to hold roles
	dn: ou=roles,dc=example,dc=org
	changeType: add