Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

authentication and encryption for etcd? #77

Open
Bobgy opened this issue Sep 8, 2021 · 1 comment
Open

authentication and encryption for etcd? #77

Bobgy opened this issue Sep 8, 2021 · 1 comment

Comments

@Bobgy
Copy link

Bobgy commented Sep 8, 2021

I can see custom etcd manifests in the repo.
Can you further clarify why it is needed, what data can be stored there?
Does it make sense to configure TLS, authentication to secure it?

@kuizhiqing
Copy link
Collaborator

Etcd is used for experimental elastic feature, information like pods ip and ready state and more are collected.

Indeed, etcd is designed as an external dependency which should be configured manually on installation, the manifests in deploy is just provide a quick practice, maybe we move it to third-party ?

The authentication is a little bit hard in practice since framework is design to be run even without kubernetes which is expensive to configure authentication. As a trade-off, the info in etcd is not really sensitive. Maybe we provide a configuration option or consider it later.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants