{"action":"created","issue":{"url":"https://api.github.com/repos/latchset/tang/issues/20","repository_url":"https://api.github.com/repos/latchset/tang","labels_url":"https://api.github.com/repos/latchset/tang/issues/20/labels{/name}","comments_url":"https://api.github.com/repos/latchset/tang/issues/20/comments","events_url":"https://api.github.com/repos/latchset/tang/issues/20/events","html_url":"https://github.com/latchset/tang/issues/20","id":294069899,"number":20,"title":"In public tang server - block response until approval","user":{"login":"ieugen","id":1050920,"avatar_url":"https://avatars0.githubusercontent.com/u/1050920?v=4","gravatar_id":"","url":"https://api.github.com/users/ieugen","html_url":"https://github.com/ieugen","followers_url":"https://api.github.com/users/ieugen/followers","following_url":"https://api.github.com/users/ieugen/following{/other_user}","gists_url":"https://api.github.com/users/ieugen/gists{/gist_id}","starred_url":"https://api.github.com/users/ieugen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ieugen/subscriptions","organizations_url":"https://api.github.com/users/ieugen/orgs","repos_url":"https://api.github.com/users/ieugen/repos","events_url":"https://api.github.com/users/ieugen/events{/privacy}","received_events_url":"https://api.github.com/users/ieugen/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-02-03T01:22:04Z","updated_at":"2018-02-19T21:03:10Z","closed_at":null,"author_association":"NONE","body":"Hi, \r\n\r\nI'm ttying to figure out how I can use tang + clevis in a public setup. \r\n\r\nMy idea was to develop an approvsl step around tang where a request for decription woll wait for human approval until it is served.\r\n\r\nThis might meje the system work over the internet. Of course this can be abused.\r\n\r\nIs this a good solution?\r\nAny ideas on how to solve the issue of using tang over public internet?\r\n\r\nThanks,"},"comment":{"url":"https://api.github.com/repos/latchset/tang/issues/comments/366802065","html_url":"https://github.com/latchset/tang/issues/20#issuecomment-366802065","issue_url":"https://api.github.com/repos/latchset/tang/issues/20","id":366802065,"user":{"login":"zdenekpizl","id":3509880,"avatar_url":"https://avatars3.githubusercontent.com/u/3509880?v=4","gravatar_id":"","url":"https://api.github.com/users/zdenekpizl","html_url":"https://github.com/zdenekpizl","followers_url":"https://api.github.com/users/zdenekpizl/followers","following_url":"https://api.github.com/users/zdenekpizl/following{/other_user}","gists_url":"https://api.github.com/users/zdenekpizl/gists{/gist_id}","starred_url":"https://api.github.com/users/zdenekpizl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zdenekpizl/subscriptions","organizations_url":"https://api.github.com/users/zdenekpizl/orgs","repos_url":"https://api.github.com/users/zdenekpizl/repos","events_url":"https://api.github.com/users/zdenekpizl/events{/privacy}","received_events_url":"https://api.github.com/users/zdenekpizl/received_events","type":"User","site_admin":false},"created_at":"2018-02-19T21:03:10Z","updated_at":"2018-02-19T21:03:10Z","author_association":"NONE","body":"Usually, if you are using LUKS you are understanding the system is important. Therefore you are monitoring it somehow, by Icinga, Zenoss, SiteScope (sigh, I hope nobody is forced to use it any more) or similar tool. So you know that system went down and has been restarted. That's about notifications, let's third-party tools do this job.\r\n\r\nThe queue of waiting approval is another question, from top of my head I can imagine persistent list somewhere at Tang's directory structure (a file with lines of clients or better one file for one client with content identifying the client uniquely) or employ some messaging (rather not, that's too complicated)\r\n\r\nI am not sure about '''You'll also need some system for managing who's doing what on each system'''. I think for beginning we can just use binary approach: Tang is serving secrets without waiting for an approval versus Tang is waiting for an approval for any request."}}
{"actor":{"display_login":"zdenekpizl"}}