Concierge
Web Management & Secure Access Control of AWS Security Groups. Allows you to create IP leases for incoming connections to AWS instances. Also, allows creating invites to allow guest access by URL/Email Invites.Uses two factor authentication for additional security.
Install / Use
/learn @razorpay/ConciergeREADME
Concierge-Ingress
It allows us to create leases for incoming connections to Kubernetes Ingress Objects.
How It Works
It uses Kubernetes client go package (Go) to access and make changes in the k8s objects.
How To Use
-
Any developer having an organization email and login to Ingress-concierge.
-
Homepage have the list of all the ingress from which we can take the lease and it looks like the image added below

-
For getting lease to a particular ingress, click on the name of the ingress from the above ingress list shown and you will be forwarded to the page shown below:

-
Now select the expiry time for the lease and click on "Access" button.
-
You will get a lease and you can't take the lease again if you already have the active lease.

-
You can also terminate the lease or it will automatically get terminated after its expiry time.
Installation
-
Obtain Google client secret and client id for OAuth.
-
Add
http://127.0.0.1:4180in Authorized JavaScript origins andhttp://127.0.0.1:4180/oauth2/callbackin Authorized redirect URIs. -
Get the source code on your machine via git.
git clone --branch ingress-concierge https://github.com/razorpay/concierge.git -
Rename file
.env.exampleto.envand change credentials.mv .env.example .env -
Rename file
oauth2_proxy.example.cfgtooauth2_proxy.cfginoauth2_proxydir and add the following values obtained from Google OAuth$ mv oauth2_proxy/oauth2_proxy.example.cfg oauth2_proxy/oauth2_proxy.cfg $ vi oauth2_proxy/oauth2_proxy.cfg client_id = client_secret = -
Make sure to change the
seeding.gofile indatabasedir with your information else you won't be able to login. -
Run docker-compose command to run the application.
docker-compose up -d -
Check for the running application.
docker ps -
Access the application on http://127.0.0.1:4180
