- Notifications
You must be signed in to change notification settings - Fork923
Closed
Milestone
Description
Provisioners have anorganization_id
, but authentication and setup are still globally scoped with asingle shared key.
Provisioners need an authentication flow scoped to an organization to allow organization admins to create, maintain, and remove provisioners in their org. The flow should also include the ability to set the provisioner tags.
Tasks
- Add provisioner auth tokens table to database -chore: add provisioner key crud apis #13857
- Add POST provisioner tokens route -chore: add provisioner key crud apis #13857
- Add DELETE provisioner tokens route -chore: add provisioner key crud apis #13857
- Add GET provisioner tokens route -chore: add provisioner key crud apis #13857
- Add create provisioner tokens CLI command -feat: add provisioner key cli commands #13875
- Add delete provisioner tokens CLI command -feat: add provisioner key cli commands #13875
- Add list provisioner tokens CLI command -feat: add provisioner key cli commands #13875
Make- No need since they use in memory pipebuilt-in
provisioners use auth tokens- Make provisionerd take an org flag -chore: add multi-org flag to develop.sh #13923
- Add org scoped GET provisioners route -feat: get org scoped provisioners #13953
- Move cli commands to slim build -chore: move provisioner keys commands into slim build #13993
- Accept auth tokens on provisionerd register endpoint -feat: accept provisioner keys for provisioner auth #13972
- Add tags concept to provisioner keys -feat: add tags to provisioner keys api #13989
- Add auth tokens flag to provisionerd command -feat: add --key flag to provisionerd start #14002
- Shorten auth token length -chore: shorten provisioner key #14017
Upgrade path for preshared keys to new authentication tokens- covered in docs- Relevant doc changes - met with ben to go overdocs: add organizations guide #14012