Automatic Joining Cloud VMs to FreeIPA Identity Domain

Learn how to automatically and securely enroll cloud virtual machines into FreeIPA identity management domains through this 35-minute conference talk from DevConf.CZ 2025. Discover the Podengo project, an open source solution that enables automatic domain enrollment for cloud workloads while maintaining organizational security policies and compliance objectives. Explore how FreeIPA provides authentication, access control, and security features for Linux machines, and understand why traditional SSH key workflows may fall short of security requirements in cloud environments. Examine the Podengo service architecture, which registers FreeIPA deployments (including on-premises installations), authenticates cloud VMs, and facilitates secure automatic domain enrollment. Understand the underlying protocol mechanics, implementation requirements, and real-world applications including the Domain Join feature in Red Hat Hybrid Cloud Console. Review current feature gaps and potential solutions, plus explore possibilities for extending support to additional identity management solutions beyond FreeIPA. Gain insights particularly valuable for system administrators, cloud administrators, information security professionals, and those interested in cryptography applications. Note that recorded demonstrations are included to supplement the presentation content within the time constraints.