`ape-manager` service should allow list APE chains with node wallet #1389

New issue

Open

opened 2024-09-23 10:18:03 +00:00 by aarifullin · 1 comment

aarifullin commented

2024-09-23 10:18:03 +00:00

Member

Currently, APE chains for a container are managed via ape-manager service by container owner ONLY.

That can be helpful for critical situation when the owner's wallet cannot be accessed/not available but chains need to be purged by node administrator. Let's discuss this problem in the issue

Describe the solution you'd like

Probably, we want to allow frostfs-node's wallet, at least, to list chains and, optionally, to add/remove chains.

Describe alternatives you've considered

The chains can be overriden by local-override-storage but:

This will override requests only for one node
As we can't list chains we don't know what we need to override

## Is your feature request related to a problem? Please describe. Currently, _APE chains_ for _a container_ are managed via `ape-manager` service by container owner [ONLY](https://git.frostfs.info/TrueCloudLab/frostfs-node/src/branch/master/pkg/services/apemanager/executor.go#L77). That can be helpful for critical situation when the owner's wallet cannot be accessed/not available but chains need to be purged by node administrator. **Let's discuss this problem in the issue** ## Describe the solution you'd like Probably, we want to allow `frostfs-node`'s wallet, **at least**, to list chains and, optionally, to add/remove chains. ## Describe alternatives you've considered The chains can be overriden by `local-override-storage` but: - This will override requests only for one node - As we can't list chains we don't know what we need to override

aarifullin added the

discussion

good first issue

labels 2024-09-23 10:18:03 +00:00

fyrchik commented

2024-10-02 06:26:35 +00:00

Owner

Should we be able to perform other operations with node wallet?
Anyway, the behaviour should be similar to container.List: both methods fetch data from the blockchain.
frostfs-adm can list chains directly from neo-go, the administrator should be able to do this.

The task says "list", but the description says "purged". In this case no, all access check for removing from contract are done in contract.
We can add node keys there, but it is not our responsibility.

1. Should we be able to perform other operations with node wallet? 2. Anyway, the behaviour should be similar to `container.List`: both methods fetch data from the blockchain. 3. frostfs-adm can list chains directly from neo-go, the administrator should be able to do this. The task says "list", but the description says "purged". In this case no, all access check for removing from contract are done in contract. We can add node keys there, but it is not our responsibility.