phirumseng/knetrahub-pam-connector-runner repository overview

⁠phirumseng/knetrahub-pam-connector-runner

Signed connectors, executed away from the API that serves your sessions.

KNetraHub is a self-hosted IT operations portal: a Docker Swarm console, full-stack monitoring, work management, privileged access management, IP address management and a database workspace, behind one sign-in. This image is one of its sidecars — a job the portal deliberately does not do inside its own process.

📖 Documentation: https://sengphirum.github.io/KNetraHub/documentation⁠

⁠What this image does

Runs PAM connectors - the code that rotates and verifies credentials on a target system - out of process.

⁠How it works

Connector bundles are baked into the image at a read-only path, and each bundle's digest and signature is verified against the control-plane registry before it is loaded. Work arrives from the control plane over the internal network, authenticated with a runner token; the only writable path in the container is a tmpfs.

⁠What it deliberately does not do

No Docker socket, no writable root filesystem, no inbound port. A misbehaving connector is contained here rather than in the API process that holds live sessions.

⁠Deploying it

Part of a stack, not a standalone container. Deploy it with the stack file that owns it:

docker stack deploy -c docker/docker-compose.pam.yml knetrahub

⁠Supported tags

• latest — the most recent release
• x.y.z (e.g. 0.1.11) — immutable release versions

Keep this image on the same version as the rest of the stack.

⁠The rest of the stack

• phirumseng/knetrahub-app⁠ — Monolith (app)
• phirumseng/knetrahub-ui⁠ — UI
• phirumseng/knetrahub-core-api⁠ — Core API
• phirumseng/knetrahub-docker-api⁠ — Docker API
• phirumseng/knetrahub-docker-worker⁠ — Docker worker
• phirumseng/knetrahub-monitoring-api⁠ — Monitoring API
• phirumseng/knetrahub-monitoring-worker⁠ — Monitoring worker
• phirumseng/knetrahub-work-api⁠ — Work API
• phirumseng/knetrahub-work-worker⁠ — Work worker
• phirumseng/knetrahub-pam-api⁠ — Privileged Access API
• phirumseng/knetrahub-pam-worker⁠ — Privileged Access worker
• phirumseng/knetrahub-ipmgt-api⁠ — IP Management API
• phirumseng/knetrahub-ipmgt-worker⁠ — IP Management worker
• phirumseng/knetrahub-dbmanager-api⁠ — Database Manager API
• phirumseng/knetrahub-agent⁠ — node agent
• phirumseng/knetrahub-pam-ssh-gateway⁠ — PAM SSH gateway
• phirumseng/knetrahub-pam-connector-runner — PAM connector runner ← this image
• phirumseng/knetrahub-dbmanager-gateway⁠ — DB Manager gateway

⁠License

Proprietary — © Seng Phirum. All rights reserved.