Securing Ansible with a Zero Trust Overlay

Posted by sabedevops on Tuesday June 28, 2022 @02:01PM
from the github.com dept.

https://github.com/openziti-test-kitchen/ansible-paramikoz-demo

( 3 comments | 17 points | on HN )

Re:Securing Ansible with a Zero Trust Overlay by gz5 on Tuesday June 28, 2022 @02:13PM (#31911058)

So...for ops teams, remove VPNs, bastions, open IB FW ports, complex ACLs. One inbound firewall rule: deny-all.

Abstracted...Paramiko / Ansible solution shows developers how to embed secure networking into our apps, as code, via OpenZiti open source platform.

Disclosure: founder of a company which sells SaaS on top of the open source. So a massive fan but happy to answer questions as objectively as I can.

[ Parent | on HN ]

Re:Securing Ansible with a Zero Trust Overlay by sabedevops on Tuesday June 28, 2022 @02:35PM (#31911320)

OP here. I use Ansible a lot in my day-to-day work, and the day the OpenZiti Python SDK came out, I wrote a wrapper around the Paramiko connection plugin to secure the connection to the target. It was so easy, and worked so well, I wrote a small demo so you all can try it too. Happy to answer any questions, and if you try it, share whatever feedback you have!

[ Parent | on HN ]

Re:Securing Ansible with a Zero Trust Overlay by vhdlmike on Tuesday June 28, 2022 @10:12PM (#31915678)

Solutions that add more security without more pain, always feel like double the win. Thanks for posting.

[ Parent | on HN ]