Allow tree reading requests signed by keys from allow list #449

New Issue

Closed

opened 2023-06-15 11:02:21 +00:00 by alexvanin · 2 comments

alexvanin commented

2023-06-15 11:02:21 +00:00

Owner

To get enhanced metrics and statistics, we want to parse tree service data once in a while. Current tree service ACL implementation restricts access to the trees to everyone except container owner key.

Describe the solution you'd like

Configure node with the list of allowed keys to access read operations in the tree service. Tree service ACL implementation checks every request with the list.

Describe alternatives you've considered

Use control service to access tree service data with allowed keys.

## Is your feature request related to a problem? Please describe. To get enhanced metrics and statistics, we want to parse tree service data once in a while. Current tree service ACL implementation restricts access to the trees to everyone except container owner key. ## Describe the solution you'd like Configure node with the list of allowed keys to access read operations in the tree service. Tree service ACL implementation checks every request with the list. ## Describe alternatives you've considered Use control service to access tree service data with allowed keys.

alexvanin added the

label 2023-06-15 11:02:21 +00:00

fyrchik was assigned by alexvanin

2023-06-15 11:02:21 +00:00

alexvanin commented

2023-06-15 11:02:33 +00:00

Poster

Owner

Related to #390

Related to #390

fyrchik added this to the v0.38.0 milestone 2023-06-15 11:59:27 +00:00

fyrchik added the

label 2023-06-19 07:38:03 +00:00

acid-ant was assigned by fyrchik

2023-06-20 07:12:16 +00:00

fyrchik removed their assignment 2023-06-20 07:12:21 +00:00

fyrchik commented

2023-06-20 07:13:48 +00:00

Owner

Let's have tree.allowed_keys (like in the control service) containing keys for which READ operations are allowed.

Let's have `tree.allowed_keys` (like in the control service) containing keys for which READ operations are allowed.

acid-ant referenced a pull request that will close this issue

2023-06-21 11:32:38 +00:00

tree: Allow reading requests signed by keys from allow list #458

fyrchik referenced this issue from a commit

2023-06-26 07:12:27 +00:00

[#449] tree: Allow reading requests signed by keys from allow list

fyrchik referenced this issue from a commit

2023-06-26 07:12:27 +00:00

[#449] cli: Allow to exec `tree get-by-path` without bearer token

fyrchik closed this issue

2023-06-26 07:12:28 +00:00

ironbee referenced this issue

2023-07-12 11:32:39 +00:00

tree service panics when bearer token is nil #514

Sign in to join this conversation.

No Label

good first issue

No Milestone

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: TrueCloudLab/frostfs-node#449

There is no content yet.