Permission reduction - Githubissues

backube / volsync

Asynchronous data replication for Kubernetes volumes

https://volsync.readthedocs.io

GNU Affero General Public License v3.0

515 stars 64 forks source link

Open JohnStrunk opened 1 year ago

JohnStrunk commented 1 year ago

This issue tracks the work to reduce the permissions required by VolSync.

By default, both VolSync and the movers should run under the Pod Security Standards "Restricted" policy
It should be possible to securely enable VolSync to run movers with elevated privileges when necessary to preserve permissions/UID/GID during replication

### Tasks
- [x] #373
- [x] #365
- [x] #364
- [x] #366
- [x] #367
- [x] #368
- [ ] #369
- [ ] #370

tesshuflower commented 1 year ago

Moving to version 0.8 milestone to cover cli enhancement and deprecating the rsync/ssh mover.