Comments (7)
I think it's limited to who has access to the longhorn-system
namespace in Rancher. @guangbochen can help to confirm.
from longhorn.
yes, and to be more detailed, we will default to project(1 project contains multiple ns) level access protection, not 100% sure about namespace level protection, but you can always move it to an independent project if that matters.
from longhorn.
Close this issue since we now provided authentication though Rancher. Separate user management can be filed as another issue.
from longhorn.
@cntsw yeah, in that case, there will be no authorization support in the current version.
from longhorn.
Update: as in v0.3.2, when installing as a catalog app, Longhorn UI will be exposed behind Rancher. You will need to have the access to the project Longhorn is running to access the UI.
Longhorn still needs its own user management support though.
from longhorn.
Is access granted by RBAC? What are the roles required?
from longhorn.
@guangbochen @yasker
If the user bypasses the Ingress or Rancher and accesses the longhorn-frontend Pod directly, does it mean that there is no authorized support?
(Assuming there is no network isolation, users can access the Pod's IP segment by some means)
from longhorn.
Related Issues (20)
- Read Only file system Not able to write into the mounted volume HOT 3
- [IMPROVEMENT] Record instance-manager name for a block disksin `node.spec.diskStatus` HOT 1
- [TEST][IMPROVEMENT] Record instance-manager name for a block disksin `node.spec.diskStatus`
- [IMPROVEMENT] UI does not find credentials for Backblaze B2 s3-compatible storage for backup HOT 4
- [IMPROVEMENT] Fall back to a running instance-manager if a default is not available HOT 6
- [IMPROVEMENT] Use a file to set golang and golangci-lint version
- [IMPROVEMENT] Only sync log settings to running instance manager pod HOT 7
- [IMPROVEMENT] Change to use bci image HOT 1
- [BUG] 40Gb of longhorn metadata in a pv? HOT 5
- [QUESTION] Why is the data tested by kbench very different from the official data? HOT 1
- Strategy for archived versions HOT 2
- [BUG] fsck of encrypted volume hangs indefinitely until killed HOT 3
- [FEATURE] Backup supports retention days HOT 5
- Understand Backups HOT 4
- [BACKPORT][v1.6.2][BUG] Valid backup secret produces error message: "there is space or new line in AWS_CERT"
- [BACKPORT][v1.5.6][BUG] Valid backup secret produces error message: "there is space or new line in AWS_CERT"
- Add extraDeploy field in Helm chart HOT 1
- snapshotMaxCount should support a smaller nr than 2 HOT 3
- [TASK] Clarify the reason for k8s.io replace directives in go.mod files HOT 1
- [IMPROVEMENT] allow filtering of objects in system backup HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from longhorn.