linode / manager

Akamai's Cloud Manager is an open-source, single-page application designed as the primary frontend interface for interacting with the Linode API. It is entrusted by hundreds of thousands of customers with the management of their Linode services.
https://cloud.linode.com
Apache License 2.0
687 stars 353 forks source link

Preventing Linode deletion #7092

Open cahebebe opened 3 years ago

cahebebe commented 3 years ago

Please take in mind create an option when I could lock my Linone(s) VM when accidentally try to "delete" it, because it's too easy remove and lost data, would be extended to the another services.

Regards.

nerdbaggy commented 3 years ago

Would love this feature as well

ghost commented 3 years ago

+1, AWS has had this for a white, very helpful

Jskobos commented 3 years ago

Thanks for this feedback, sorry we missed this issue. We've been planning to make deleting a Linode type-to-confirm, which should make things a bit safer. I'll pass on the feedback about actually locking a Linode as well to see if it's something we can support.

nerdbaggy commented 3 years ago

It would be great to have the delete protection on API calls as well.

ghost commented 3 years ago

Yes, API protection would also be helpful. Maybe a flag or secondary request?

SNOW-NOVA commented 3 years ago

+1 - I deleted one the other day and it was totally by accident. Lucky i had an offline backup as it deleted everything including the backups :(

bnussman commented 3 years ago

Locking a Linode sounds like a nice feature. But keep in mind, when you delete a Linode, a Recovery Image is created so you may be able to recover after you delete.

Screen Shot 2021-08-25 at 5 12 14 PM

tsmgeek commented 3 years ago

@bnussman that is protection after the fact, ie you want to delete it but then realise you may need to get some data Deletion prevention should be there to also protect against mistaken actions.

As a side note the deletion protection should be an API permission, that way you can prevent say terraform from deleting anything, if protected. Or allow it to be created and protect, but after requires correct rights to alter/remove them.

This protection should also exist for Buckets/Volumes/NB etc.

aaronheath commented 2 years ago

How this isn't a feature yet is beyond me. Would make those coming from AWS that are used to instance protection feel (and be) much more secure.

This has got to be low hanging fruit and trivial to implement.

dlong500 commented 2 years ago

@Jskobos It looks like you don't work for Linode anymore. Any chance you could email a connection to look into this? Really surprised this hasn't been addressed yet. It's literally three clicks and your linode is gone without so much as a key typed. I'm not as concerned about accidentally deleting it myself (though with a spazzy mouse it's entirely possible something horrible could happen). I'm more concerned with a kid who might run into the home office when I'm getting coffee or something.

Deleting a linode should ideally require you to type a password, not just a confirmation phrase. Having an option to enable a 10-minute or so window during which a text alert is sent with the option of cancelling the operation would be icing on the cake.