TOKEN

[badji]

Bonjour,
Just a note on the TOKEN authentication module which arrives on the future version of Proxmoxve.
This is a good step forward in authentication with external platforms like consul-Vault and Freeipa...
It is used with K8S, DCOS, MESOS ...
Thanks to the development team.

 

[Alwin]

Do you have any use case for it?

 

[badji]

Bonjour,
Proxmox allows me to create multi-hpc or multi-Paas in vms on the same physical platform. Each department will have its HPC, PAAS, CAAS ... If my deployment I do it directly on my physical servers I could only create one.
Example HPC with DCOS / MESOS. The commercial version directly integrates Vault for cts security. The fact that I deploy the open-source versions in vms-centos on proxmoxve, I must create freeipa or vault vms for the management of the security of the neuds of each hpc (each domain) in addition to securing all the containers which will be deployed later as services on the paas dcos / mesos.
But if the management of Tokens can be done directly on proxmox it will be easy and even better. No more need for Freeipa or Vault to manage the security of each domain. The Token system built into Proxmox can do that. If you need further explanation, I can provide you with a demo on my POC remotely.

https://medium.com/mobileforgood/se...-os-with-hashicorps-vault-part-3-9333c375bec0

Merci.

 

[Alwin]

So, this basically removes the freeIPA setup for you. Glad to hear your use case.

 

[badji]

It's no good for Freeipa

 

[fabian]

the API token support is already available since libpve-access-control 6.0-6 , see https://pve.proxmox.com/pve-docs/pve-admin-guide.html#pveum_tokens and the example in that section for a bit more detail.

 

[badji]

Bonjour,
I will look it.
Merci.