Deploy to Service Fabric
The 'Deploy to Service Fabric' process does not provide all the available security mode options available in Service Fabric, we are doing a POC around an on-premise SF cluster using a gMSA which the Fabric will run under the context of and Windows Identities to allow client-to-node communication. the option for using Windows Credentials (in this case it would be the Windows Service Account which Octopus is running under the context of) to connect to the cluster is not available! i.e.
Connect-ServiceFabricCluster -ConnectionEndpoint <cluster-domain-name | server hostname>:19000 -WindowsCredential
Marc
shared this idea
-
Scott McCollough
commented
Due to the general lack of support anywhere for Windows client authentication, we are moving to certificate based authentication instead.
-
Scott McCollough
commented
We are also looking at gMSA and Windows security. It would be nice if this were implemented.
-
Jason Guerrieri
commented
As an interim fix, add an Octopus Project Variable called Octopus.Action.ServiceFabric.SecurityMode with the value SecureAD. This will attempt the connection using the Windows Service Account Octopus is currently running under.
-
Casey
commented
We are starting to implement gMSA accounts and need this functionality too. Please consider it for a future (near term) release.
-
Anonymous
commented
We need this feature as well, should be relatively easy to implement.