Mailing-List: contact dev-help@aurora.incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@aurora.incubator.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAJHWZXNXZ0i5CpJZ=Czr4DPkbGfmYfLSLfdHyFKimjp_i78NGw@mail.gmail.com>
References: 
 <CAJHWZXNXZ0i5CpJZ=Czr4DPkbGfmYfLSLfdHyFKimjp_i78NGw@mail.gmail.com>
Date: Wed, 18 Feb 2015 14:06:08 -0800
Message-ID: 
 <CAGRA8uPx8soVCo07WOnbeX3f2WFrFwGOfSpG6-GsRLRb_5dfDw@mail.gmail.com>
Subject: Re: Getting secure data into Docker containers
From: Bill Farner <wfarner@apache.org>
To: "dev@aurora.incubator.apache.org" <dev@aurora.incubator.apache.org>
Content-Type: multipart/alternative; boundary=001a11339d1ec64ab1050f640665

--001a11339d1ec64ab1050f640665
Content-Type: text/plain; charset=UTF-8

Mounts is the most lo fi approach that comes to mind.  I'd be in support of
patches to satisfy (part of) AURORA-1107 to fulfill this need (which would
hopefully be distinct from another perspective on AURORA-1107 in which
end-users of Aurora can request arbitrary mounts).

-=Bill

On Wed, Feb 18, 2015 at 1:19 PM, Hussein Elgridly <
hussein@broadinstitute.org> wrote:

> Aurorans,
>
> We have some secure data (think login credentials) that we need to access
> from inside a Docker container launched by Aurora. I'm trying to figure out
> the best approach for getting them inside the container, since baking them
> into the image is a can of worms I don't want to open.
>
> The ideal solution would be to put the creds on the Mesos slaves and then
> mount them on the container, but Aurora doesn't have the means to do this
> yet. If the answer is "wait a week and AURORA-1107 will be done", then
> great; but if not, anyone have any ideas?
>
> Thanks,
> Hussein Elgridly
> Senior Software Engineer, DSDE
> The Broad Institute of MIT and Harvard
>

--001a11339d1ec64ab1050f640665--