Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

💡 [Feature] Protect Portainer #335

Closed
fmigneault opened this issue Jun 1, 2023 · 4 comments
Closed

💡 [Feature] Protect Portainer #335

fmigneault opened this issue Jun 1, 2023 · 4 comments
Assignees
Labels
ci/operations Continuous Integration components enhancement New feature or request project/DACCS Related to DACCS project (https://github.com/orgs/DACCS-Climate) security Issues or features related to security concerns

Comments

@fmigneault
Copy link
Collaborator

Description

Ensure Portainer is accessed behind Magpie/Twticher authentication/authorization.
Currently, it uses its own authentication mechanism.
It could be aligned with Magpie/Twitcher, or have a double-authentication layer.
Either way, it should be limited to admin-only access.

References

@fmigneault fmigneault added enhancement New feature or request ci/operations Continuous Integration components security Issues or features related to security concerns project/DACCS Related to DACCS project (https://github.com/orgs/DACCS-Climate) labels Jun 1, 2023
@tlvu
Copy link
Collaborator

tlvu commented Jun 7, 2023

I think @mishaschwartz is dropping this one so can close this issue?

@mishaschwartz
Copy link
Collaborator

@tlvu Do you mean that we are deprecating portainer? Sorry if I missed that one. If so I need to remove it as part of #311.

@tlvu
Copy link
Collaborator

tlvu commented Jun 7, 2023

@mishaschwartz opps I vaguely remember you deprecated portainer with all the other (catalog, solr, frontend, ...)? Sorry if my memory is wrong. I have too much on my plate lately.

@fmigneault
Copy link
Collaborator Author

fmigneault commented Aug 31, 2023

This was resolved in #331
(not directly protected by Magpie/Twitcher, but port is not exposed anymore)

If we want to deprecate it, it can be another issue.
Using a separate admin access is OK for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ci/operations Continuous Integration components enhancement New feature or request project/DACCS Related to DACCS project (https://github.com/orgs/DACCS-Climate) security Issues or features related to security concerns
Projects
None yet
Development

No branches or pull requests

3 participants