[chef] Re: Re: Re: Re: Web UI statement

[Noah Kantrowitz < >]

Disclaimer: I do not work for Opscode/ChefInc so my information may be out of 
date.

As of the last plans announced, the Web UI in FOSS Chef is deprecated and is 
only marginally maintained. No new feature development has been done on it in 
quite some time, only minimal security maintenance is done and even that can 
have some unfortunate lag given the number of Rails 0days lately. The UI was 
briefly removed in early 11 builds I think, but as this was unannounced there 
was enough outcry to put it back in. Unfortunately thats kind of been the end 
of it.

As I said, there has been no significant development on it in over a year as 
the internal teams moved over to "webui2", which is an Enterprise Chef-only 
feature. No specific removal plan has been announced that I know of, but 
presumably it will be removed fully in Chef 12 as that is the next release 
that can be backwards-incompatible.

At this point I highly recommend disabling the WebUI in FOSS Chef given the 
potential security risks and general deprecation. There are a few community 
projects that provide a web interface for a Chef server, but all are much 
smaller in scope, generally offering only read operations and tailored to a 
particular workflow. This is unfortunate, when we started work on webui2 is 
was understood this was the likely outcome but as they say Cash Rules 
Everything Around Me. Hope that clears up some of the questions, and if I've 
said any untruths I hope Opscode will set the record straight.

--Noah

On Jun 26, 2014, at 10:21 PM, Marco Betti 
<
 >
 wrote:

> Any comment from Opscode guys?
> 
> Reading Noah's sentence I had the same impression and would be courious too 
> :-)
> 
> Or maybe that he was just talking about user authentication functionality 
> to be deprecated in FOSS version
> 
> No stress for that, just courious...
> 
> Marco
> 
> 
> On Wed, Jun 25, 2014 at 7:51 PM, JOHN HASTY 
> <
 >
>  wrote:
> From an earlier email. Re-reading that, it is ambiguous as to what is 
> deprecated.
> 
> "I'm guessing you mean for user authentication? Enterprise Chef supports 
> LDAP for user authentication in the Web UI, but FOSS Chef does not. More to 
> the point, user authentication only matters in the Web UI and that is 
> deprecated in FOSS Chef anyway and should be disabled.
> 
> --Noah"
> 
> 
> 
> 
> 
> JOHN HASTY
> Software as a Service - DevOps
> Software Group
> Phone: 1-512-804-9968
> E-mail: 
> 
 
>        
> <23191904.gif>
> 
> 2407 S Congress Ave Ste E-350
> Austin, TX 78704
> United States
> 
> 
> <graycol.gif>Brian Hatfield ---06/25/2014 12:40:13 PM---Link to that 
> statement? I haven't heard that. On Wed, Jun 25, 2014 at 1:08 PM, JOHN 
> HASTY 
> <
 
> 
> From: Brian Hatfield 
> <
 >
> To:   
> 
 
> Date: 06/25/2014 12:40 PM
> Subject:      [chef] Re: Web UI statement
> 
> 
> 
> Link to that statement? I haven't heard that.
> 
> 
> On Wed, Jun 25, 2014 at 1:08 PM, JOHN HASTY 
> <
 >
>  wrote:
> I was curious about the statement that the Web UI being deprecated. Did I 
> misread that?
> 
> 
> 
> JOHN HASTY
> Software as a Service - DevOps
> Software Group 
> 
> Phone: 1-512-804-9968
> E-mail: 
> 
 
>        
> <23191904.gif>
> 
> 2407 S Congress Ave Ste E-350
> Austin, TX 78704
> United States
> 
> 
> 
> 
> 
> 
> -- 
> Ing. Marco Betti
> RHCE RHEL4 id 804006512121056

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail