You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the feature you'd like to have.
The rsync/ssh mover's functionality will be replaced by an equivalent mover that uses rsync/stunnel to send the data over a TLS/PSK transport instead of ssh.
What is the value to the end user? (why is it a priority?)
The rsync/ssh mover requires additional capabilities that make it incompatible with the PSS/Restricted security level. In order to provide better cluster security, this mover should be deprecated in favor of an stunnel-based one.
How will we know we have a good solution? (acceptance criteria)
Provide a multi-stage deprecation over several releases:
Post an event telling users to switch to the new mover
JohnStrunk
changed the title
Deprecate the old rsync/ssh mover since we can't sufficiently reduce its permissions
Deprecate the rsync/ssh mover
Aug 11, 2022
Describe the feature you'd like to have.
The rsync/ssh mover's functionality will be replaced by an equivalent mover that uses rsync/stunnel to send the data over a TLS/PSK transport instead of ssh.
What is the value to the end user? (why is it a priority?)
The rsync/ssh mover requires additional capabilities that make it incompatible with the PSS/Restricted security level. In order to provide better cluster security, this mover should be deprecated in favor of an stunnel-based one.
How will we know we have a good solution? (acceptance criteria)
Additional context
The text was updated successfully, but these errors were encountered: