Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Permission reduction #363

Open
6 of 8 tasks
JohnStrunk opened this issue Aug 10, 2022 · 1 comment
Open
6 of 8 tasks

Permission reduction #363

JohnStrunk opened this issue Aug 10, 2022 · 1 comment
Labels
tracking
Projects
VolSync work items
Milestone
Version 0.10

Comments

@JohnStrunk
Copy link
Member

JohnStrunk commented Aug 10, 2022 •
edited

This issue tracks the work to reduce the permissions required by VolSync.

Goals

  • By default, both VolSync and the movers should run under the Pod Security Standards "Restricted" policy
  • It should be possible to securely enable VolSync to run movers with elevated privileges when necessary to preserve permissions/UID/GID during replication

Tasks
Beta Give feedback
  1. Modify the VolSync operator Deployment to comply with PSS/Restricted #373
    JohnStrunk
  2. Support a Namespace annotation indicating elevated privileges are ok for movers #365
    enhancement
    tesshuflower
  3. Create a new rsync-based mover that uses stunnel w/ PSK instead of ssh #364
    enhancement
    JohnStrunk
  4. Rclone: enable reduced mover permissions #366
    enhancement
    JohnStrunk
  5. Restic: enable reduced mover permissions #367
    enhancement
    JohnStrunk
  6. Syncthing: enable reduced mover permissions #368
    enhancement
    tesshuflower
  7. CLI: Enhance CLI to support "migration" via rsync/stunnel #369
    enhancement
  8. Deprecate the rsync/ssh mover #370
    enhancement
@JohnStrunk JohnStrunk added this to the Version 0.6 milestone Aug 10, 2022
@project-bot project-bot bot added this to Incoming in VolSync work items Aug 10, 2022
@JohnStrunk JohnStrunk pinned this issue Aug 10, 2022
@JohnStrunk JohnStrunk moved this from Incoming to Backlog in VolSync work items Aug 11, 2022
@JohnStrunk JohnStrunk mentioned this issue Sep 6, 2022
Merged
@JohnStrunk JohnStrunk modified the milestones: Version 0.6, Version 0.7 Nov 30, 2022
@tesshuflower tesshuflower modified the milestones: Version 0.7, Version 0.8 Mar 8, 2023
@tesshuflower
Copy link
Contributor

Moving to version 0.8 milestone to cover cli enhancement and deprecating the rsync/ssh mover.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
tracking
Projects
VolSync project tracking
Status: No status
VolSync work items
Backlog
Milestone
Version 0.10
Development

No branches or pull requests
2 participants
@JohnStrunk @tesshuflower