Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use juju secrets to exchange the JWT and MUNGE keys between Slurm nodes #38

Open
NucciTheBoss opened this issue Nov 18, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@NucciTheBoss
Copy link
Member

Currently the Slurm charms are exchanging both the JWT and MUNGE keys through Juju relations, but as of Juju v3, we can now use Juju Secrets to exchange sensitive information between applications rather than as plain text through relation data bags. We should use Juju's secrets implementation to exchange the JWT and MUNGE keys between our Slurm applications as it provides several benefits over our current implementation.

Juju Secrets offer the ability to control which applications are allowed to access specific secrets, and it is easier to rotate out stale secrets using SecretRotateEvent. You can also set expiration dates for secrets which enables us to determine how long a MUNGE key should be in use. Juju Secrets also enable us to more securely handle these keys within the charms.

The only downside to Juju Secrets is that anyone who has a Slurm cluster on Juju v2 will be unable to automatically refresh to the secrets-enabled Slurm charms. They will need to redeploy their Charmed HPC cluster.

@NucciTheBoss NucciTheBoss added the enhancement New feature or request label Nov 18, 2024
@NucciTheBoss NucciTheBoss changed the title [Enhancement]: Use juju secrets to exchange the JWT and MUNGE keys between Slurm nodes Use juju secrets to exchange the JWT and MUNGE keys between Slurm nodes Nov 18, 2024
@jamesbeedy
Copy link
Contributor

100% behind this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants