Page MenuHomePhabricator

Netbox: Add license keys as inventory items
Open, Needs TriagePublic

Description

Now that Netbox supports inventory item roles, we could create a role of "license" and move the licenses from the private Netbox repository to Netbox.

This will help keep better visibility on them and reduces our usage of YAML files.

I think it makes sens, but no strong feeling neither, let me know if anyone disagrees.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

I made an example on https://netbox-next.wikimedia.org/dcim/devices/2687/inventory/
I'm not *that* satisfied with using the description field to store the payload, but I think all the other fields fit and it's an improvement compared to storing it in the homer-private repo. We could potentially add a custom field later on if the needs arises.

@cmooney let me know what you think.

I agree that the description is the only field "usable" at the moment for it.
How sensitive are those licences? Are we ok trusting Netbox to host them?
This will also probably complicate a bit any effort to give access to Netbox data to non-ops members.

What are your thoughts?

> How sensitive are those licences?
The existing ones are not sensitive as they're generated based on the device's serial number (can't be used anywhere else)

Are we ok trusting Netbox to host them?

Yep

This will also probably complicate a bit any effort to give access to Netbox data to non-ops members.

I agree on the principle, but here it's fine to share them with people under NDA. We can revisit it if one day we have truly secret licenses (we could for example make all inventory items private)