Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

Fyi grouper config can happen in env vars, also the sources.xml can be 
migrated to subject.properties

https://spaces.internet2.edu/display/Grouper/Grouper+configuration+overlay#Grouperconfigurationoverlay-Environmentvariables

https://spaces.internet2.edu/display/Grouper/Grouper+sources.xml+conversion+to+subject.properties

Thanks
Chris

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Christopher Hubing
Sent: Wednesday, April 25, 2018 1:00 PM
To: Jack Stewart 
<>
Cc: 
;
 csp study grouper 
<>
Subject: Re: [grouper-users] Containerized Grouper and Secrets


For I2, we are storing secret things in an encrypted S3 bucket. The build 
host has access to read from it, and then pushes the images to a private 
Elastic Container Repo. The containers run in ECS.

Here's an example of our Dockerfile for the UI:
https://github.internet2.edu/gist/chubing/c4e663ab5a39fb73dccdcd748a92c5fe

Since the new Grouper container is pushed to Dockerhub (and have tags for 
patches), it should make it pretty easy to manange (hopefully).

-c

On Wed, 25 Apr 2018, Jack Stewart wrote:

> Everyone,
> I would like to start out by saying that the new role-based Grouper 
> containers are great!  It was very easy to build the images.
> 
> Now my question is, what are other schools doing with regard to their 
> Grouper configurations?  Are you "burning them into" storing them in the 
> containers themselves, or are you using
> secrets?
> 
> Converting an application like Grouper to use secrets would be a LOT of 
> work.  Effectively, you would need to convert all of the settings to 
> environment variables.  How would you deal with
> the sources.xml files which, by design, need to be customized?
> 
> Many thanks,
> Jack
> 
> 
> --
> Jack Stewart
> Solutions Architect, Identity and Access Management
> University of Michigan
> 4251 Plymouth Road
> Ann Arbor, Michigan 48105-3640
> (734) 764-0853
> 
>