GitHub - LGUG2Z/satounki: Temporary elevated access management as a self-hosted service
github.com
Temporary elevated access management as a self-hosted service - LGUG2Z/satounki

cross-posted from: https://lemmy.world/post/9143654

Apologies in advance for sharing two link posts here two days in a row. Unemployment may be driving me a little nuts… 😅

I’ve been working on Satounki since I got laid off last month. It’s the culmination of a lot of experience building similar ad-hoc internal tooling at various places throughout my professional career.

Satounki already includes:

  • AWS support
  • GCP support
  • Cloudflare support
  • Auto-generated Terraform providers from the Rust API
  • Auto-generated Typescript client wrapper from the Rust API
  • Slack bot for request notifications, approvals and rejections
  • CLI for requests, approvals and rejections
  • Dashboard for exploring policies, requests and stats

The scope of this project is pretty big and I’m looking for contributors.

The majority of the project is written in Rust, including the generated Go and TS code. The stack is pretty simple; Actix, Diesel, SQLite, Tera etc., so if you have experience with writing web apps in Rust it should feel familiar!

Even if this is a totally new stack to you, this is a great project to develop some familiarity and experience with it, especially if you can help improve the quality of the generated Go and TS code at the same time!

  • bigredgiraffe@lemmy.world
    2·
    11 months ago

    This is incredible, it looks really well done from what the readme says nice work! I am definitely going to try this out, I was just looking for a tool to do this last week.

    • Jeezy@lemmy.worldOPEnglish
      1·
      11 months ago

      Thank you! Though please keep in mind this part of the README 😅

      While Satounki is currently in a functional state, there are no documented steps for deployment and I don’t recommend that anyone use this software for anything mission-critical just yet.

      Depending on how badly my current job search goes (lol) I’m hoping to have this in an easily deploy-able format for both NixOS and Kubernetes, but it’s not too difficult to get up and deployed if you follow the development instructions and provision the credentials in the relevant places 🤞

      • bigredgiraffe@lemmy.world
        2·
        11 months ago

        Haha I will keep that in mind, you should know though that your readme and terraform provider are already more documentation than many projects and commercial products that I have come across. If this is what you did in your spare time, we should chat, this is good work.