Currently this will not work with linstor-proxmox plugin, so we need to have Linstor Controller REST API accessible from the whole network. This plugin doesn't even work with HTTPS connections (without restricting access by cert).
This means that anyone who has access to this network can use REST API to do whatever they want within the Linstor cluster, including gaining access to the virtual disks.
It would be great to be able to configure client certificate for each Proxmox node, so we can make our cluster more secure.
Linstor Controller allows restrict client access using client certificate.
Currently this will not work with linstor-proxmox plugin, so we need to have Linstor Controller REST API accessible from the whole network. This plugin doesn't even work with HTTPS connections (without restricting access by cert).
This means that anyone who has access to this network can use REST API to do whatever they want within the Linstor cluster, including gaining access to the virtual disks.
It would be great to be able to configure client certificate for each Proxmox node, so we can make our cluster more secure.