Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Permission reduction #363

Open
6 of 8 tasks
JohnStrunk opened this issue Aug 10, 2022 · 1 comment
Open
6 of 8 tasks

Permission reduction #363

JohnStrunk opened this issue Aug 10, 2022 · 1 comment
Labels
tracking
Milestone
Version 0.12

Comments

@JohnStrunk
Copy link
Member

JohnStrunk commented Aug 10, 2022 •
edited
Loading

This issue tracks the work to reduce the permissions required by VolSync.

Goals

  • By default, both VolSync and the movers should run under the Pod Security Standards "Restricted" policy
  • It should be possible to securely enable VolSync to run movers with elevated privileges when necessary to preserve permissions/UID/GID during replication

Tasks
Beta Give feedback
  1. Modify the VolSync operator Deployment to comply with PSS/Restricted #373
    JohnStrunk
  2. Support a Namespace annotation indicating elevated privileges are ok for movers #365
    enhancement
    tesshuflower
  3. Create a new rsync-based mover that uses stunnel w/ PSK instead of ssh #364
    enhancement
    JohnStrunk
  4. Rclone: enable reduced mover permissions #366
    enhancement
    JohnStrunk
  5. Restic: enable reduced mover permissions #367
    enhancement
    JohnStrunk
  6. Syncthing: enable reduced mover permissions #368
    enhancement
    tesshuflower
  7. CLI: Enhance CLI to support "migration" via rsync/stunnel #369
    enhancement
  8. Deprecate the rsync/ssh mover #370
    enhancement
@JohnStrunk JohnStrunk added this to the Version 0.6 milestone Aug 10, 2022
@JohnStrunk JohnStrunk pinned this issue Aug 10, 2022
@JohnStrunk JohnStrunk mentioned this issue Sep 6, 2022
Merged
@JohnStrunk JohnStrunk modified the milestones: Version 0.6, Version 0.7 Nov 30, 2022
@tesshuflower tesshuflower modified the milestones: Version 0.7, Version 0.8 Mar 8, 2023
@tesshuflower
Copy link
Contributor

Moving to version 0.8 milestone to cover cli enhancement and deprecating the rsync/ssh mover.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
tracking
Projects
VolSync project tracking
Status: No status
Milestone
Version 0.12
Development

No branches or pull requests
2 participants
@JohnStrunk @tesshuflower