Open JohnStrunk opened 7 years ago
Currently, Gluster is deployed without security, and enabling security requires manual intervention. Without TLS enabled, pods can directly access Gluster volumes if they know the IP of a server and a volume name, circumventing access control.
I will write up a proposal for TLS by default.
@jarrpa You can assign this issue to me.
Any updates on this feature? This will be super useful!
I haven't put together an implementation yet, but it's still a feature we plan to get done.
Thanks for the feedback. This will be a super useful feature.
Currently, Gluster is deployed without security, and enabling security requires manual intervention. Without TLS enabled, pods can directly access Gluster volumes if they know the IP of a server and a volume name, circumventing access control.
I will write up a proposal for TLS by default.
@jarrpa You can assign this issue to me.