Open nak3 opened 7 years ago
This requires a bit of thought. True; anyone with access to etcd can mess with it. This should evolve as etcd3 acls evolve.
A short term solution is to present a valid gRPC client cert to etcd; only valid users are signed.
Currently, any users who accesses MDS(etcd) can
list
and use(mount
) volumes. To avoid accident, access control should be implemented. There may be many ideas, but I personally think these two are necessary at the basic level.suspend
function (or start/stop) for volumes.