Automatic joining cloud VMs to FreeIPA identity domain
summary
Podengo registers an existing FreeIPA deployment and orchestrates automatic secure enrollment of cloud VMs via a small client, a Podengo backend and the IPA/HCC server stack; demos show an EC2 image built with Image Builder, registered via subscription-manager, and joining FreeIPA in about 30–90 seconds with SSH key steps unnecessary and GitHub SSO working for users. Current limits: preview mode, packages in AppStream, and support for only one registered domain so far.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:04Talk agenda
- 2:06Identity access problem
- 3:53Potential solutions
- 4:57Solution overview
- 7:28Padeno project
- 8:30Domain join benefits
- 10:03Architecture overview
- 15:54Demo overview
- 16:15Registering identity domain
- 17:01Building and launching VM
- 20:42Verifying enrollment
- 23:16Gaps and future work
- 24:41Community engagement
- 27:12Q&A
related talks
24mSecurity benefits of FreeIPA/IDM
38mFreeIPA
45mDeploying and managing IdM with Ansible
50mBoot my (secure)-(portable) clouds!
26mMigrating a Linux environment to IDM
10mPinniped: A Unified Framework for User Authentication to Kubernetes Cluster
14m"Peer Pods": a confidential computing approach
15mFive podman features you didn’t know about or that you should consider start using