1. OPEN SOURCE SYSTEMS FOR
Bulgarian HSSIP
15 September 2017
OPEN SOURCE SYSTEMS FOR
SECRETS STORAGE
SuperGIRL: Irina Hristova
SuperBOY: Dimitar Oparlakov
SuperCAPTAIN: Zhechka Toteva

2. CERN COMPUTING CENTER MANAGEMENT SYSTEM
Follows client-server architecture
PUPPET
Runs on many Unix-like systems as well as on Microsoft Windows
Open-source software configuration management tool
Includes its own declarative language to describe system configuration

3. POTENTIAL REPLACEMENTS OF THE SECRETS STORAGE TOOLS
SUMMARY OF OUR WORK

4. THE BEST DECISION SO FAR
VAULT
THE BEST DECISION SO FAR

5. TIGHTLY CONTROLS ACCESS
TOKENS
SECURES
PASSWORDS
CERTIFICATES
STORES
API KEYS
TIGHTLY CONTROLS ACCESS
OTHER SECRETS IN MODERN COMPUTING

6. THE PROCESS
STEP 1
CREATED VIRTUAL MACHINES IN DIFFERENT BRANCHES MANAGED BY PUPPET

7. THE PROCESS
STEP 2
LEARNT BASIC COMMANDS, CREATED PASSWORD IN tbag AND INSTALLED THEM

8. THE PROCESS STEP 3 STEP 4 STEP 5 STEP 6 STEP 7 STEP 8
STARTED VAULT IN DEVELOPMENT MODE
STEP 4
DECLARED SECRETS IN DEVELOPMENT MODE
STEP 5
STUDDIED DIFFERENT BACKENDS
STEP 6
INSTALLED CONSUL BACKEND
STEP 7
STARTED VAULT IN PRODUCTION MODE
STEP 8
TRIED DIFFERENT USER AUTHENTICATIONS

9. THE PROCESS
STEP 9
WORKED WITH HTTP APIs

10. THE PROCESS
STEP 10
REPLACED RIAK WITH VAULT ON LOCAL NODE

11. THE PROCESS
STEP 10’
REPLACED RIAK WITH VAULT ON LOCAL NODE

12. FUTURE PLANS Bulgarian HSSIP 15 September 2017
ORGANISED SECRETS IN AN HIERARCHICAL ORDER

13. Thanks for Watching