Skip to content
This repository has been archived by the owner on Oct 21, 2020. It is now read-only.

Ceph provisioner requires creating secrets in PVC namespaces #309

Closed
rootfs opened this issue Aug 22, 2017 · 0 comments · Fixed by kubernetes/kubernetes#49502 or #550
Closed

Ceph provisioner requires creating secrets in PVC namespaces #309

rootfs opened this issue Aug 22, 2017 · 0 comments · Fixed by kubernetes/kubernetes#49502 or #550

Comments

@rootfs
Copy link
Contributor

rootfs commented Aug 22, 2017

Existing CephFS PV expects a secret exists in the Pod's (or Claim's) namespace, and thus tries to create secret in any namespace. This will bring risk if CephFS provisioner is compromised and overrides secrets used by kubernetes.

@liggitt
@rootfs rootfs mentioned this issue Aug 22, 2017
Merged
@rootfs rootfs changed the title unable to provision CephFS with default rbac rules in kubernetes 1.6 Ceph provisioner requires creating admin secrets in PVC namespaces Aug 22, 2017
@rootfs rootfs changed the title Ceph provisioner requires creating admin secrets in PVC namespaces Ceph provisioner requires creating secrets in PVC namespaces Aug 22, 2017
@wongma7 wongma7 reopened this Oct 28, 2017
@wongma7 wongma7 mentioned this issue Oct 28, 2017
Merged
@wongma7 wongma7 mentioned this issue Nov 12, 2017
Closed
@rootfs rootfs mentioned this issue Nov 16, 2017
Merged
cofyc added a commit to cofyc/external-storage that referenced this issue Jan 10, 2018
@cofyc
CephFS Provisioner: Add secret namespace support.
e60643e 
- Administrators can configure a dedicated secret namespace for CephFS
  provisioner (fix kubernetes-retired#309)
- Fix a bug in deleting secrets (should be backward compatible)
cofyc added a commit to cofyc/external-storage that referenced this issue Jan 10, 2018
@cofyc
CephFS Provisioner: Add secret namespace support.
0b861f1 
- Administrators can configure a dedicated secret namespace for CephFS
  provisioner (fix kubernetes-retired#309)
- Fix a bug in deleting secrets (should be backward compatible)
@cofyc cofyc mentioned this issue Jan 10, 2018
Merged
cofyc added a commit to cofyc/external-storage that referenced this issue Jan 10, 2018
@cofyc
CephFS Provisioner: Add secret namespace support.
859ad43 
- Administrators can configure a dedicated secret namespace for CephFS
  provisioner (fix kubernetes-retired#309)
- Fix a bug in deleting secrets (should be backward compatible)
aglitke pushed a commit to aglitke/external-storage that referenced this issue Jan 19, 2018
@cofyc @aglitke
CephFS Provisioner: Add secret namespace support.
8567acc 
- Administrators can configure a dedicated secret namespace for CephFS
  provisioner (fix kubernetes-retired#309)
- Fix a bug in deleting secrets (should be backward compatible)
@cofyc cofyc mentioned this issue Mar 19, 2018
Merged
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
2 participants
@rootfs @wongma7