Grouper Users - Open Discussion List

[Christopher Hubing <>]

For I2, we are storing secret things in an encrypted S3 bucket. The build 
host has access to read from it, and then pushes the images to a private 
Elastic Container Repo. The containers run in ECS.

Here's an example of our Dockerfile for the UI:
https://github.internet2.edu/gist/chubing/c4e663ab5a39fb73dccdcd748a92c5fe

Since the new Grouper container is pushed to Dockerhub (and have tags for 
patches), it should make it pretty easy to manange (hopefully).

-c

On Wed, 25 Apr 2018, Jack Stewart wrote:

> Everyone,
> I would like to start out by saying that the new role-based Grouper 
> containers are great!  It was very easy to build the images.
>
> Now my question is, what are other schools doing with regard to their Grouper 
> configurations?  Are you "burning them into" storing them in the containers 
> themselves, or are you using
> secrets?
>
> Converting an application like Grouper to use secrets would be a LOT of work. 
>  Effectively, you would need to convert all of the settings to environment 
> variables.  How would you deal with
> the sources.xml files which, by design, need to be customized?
>
> Many thanks,
> Jack
>
>
> --
> Jack Stewart
> Solutions Architect, Identity and Access Management
> University of Michigan
> 4251 Plymouth Road
> Ann Arbor, Michigan 48105-3640
> (734) 764-0853