search

PaddleFlow / paddle-operator

Elastic Deep Learning Training based on Kubernetes by Leveraging EDL and Volcano
Apache License 2.0
31 stars 15 forks source link

authentication and encryption for etcd? #77

Open Bobgy opened 3 years ago

Bobgy commented 3 years ago

I can see custom etcd manifests in the repo. Can you further clarify why it is needed, what data can be stored there? Does it make sense to configure TLS, authentication to secure it?

kuizhiqing commented 3 years ago

Etcd is used for experimental elastic feature, information like pods ip and ready state and more are collected.

Indeed, etcd is designed as an external dependency which should be configured manually on installation, the manifests in deploy is just provide a quick practice, maybe we move it to third-party ?

The authentication is a little bit hard in practice since framework is design to be run even without kubernetes which is expensive to configure authentication. As a trade-off, the info in etcd is not really sensitive. Maybe we provide a configuration option or consider it later.