I’m not sure if it is on the roadmap.
Thx .
The Operations Center project at FuturFusion goes in that direction a bit.
(Yeah, I know, we’ve been focusing on code and there’s 0 documentation or even a README right now :))
Basically it supports deploying Incus at pretty large scale by using Incus OS as a base, it supports assembling clusters, then handles global inventory across all clusters as well as managing the rollout of updates and the like.
One main difference from the VMware vCenter or even Proxmox’s approach is that we’ve designed things to be as secure as possible, meaning that once a cluster has been deployed, Operations Center will downgrade its own access to the cluster so it can handle inventory tracking but cannot actually alter anything on the cluster.
Instead it will point the user to whatever the relevant cluster URL is so the user can authenticate there and perform whatever action they need, which will then be tracked by Operations Center.
The reason for that is pretty simple, we don’t want a compromised Operations Center to compromise every single managed cluster. Just like we keep clusters themselves self-contained so the compromise of one cluster doesn’t compromise another cluster.
4 Likes