-
Notifications
You must be signed in to change notification settings - Fork 1.5k
feat(cloud): add shared-instance flag in limit superflag in alpha (#7770) #8625
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why are we doing this in cloud? Can we live without it? And what is the comment about that says that this PR avoids leaking secrets.
10e06cf
to
6617b70
Compare
I am not very sure about why do we need this in cloud. @rarvikar could you put some thoughts on this?
I couldn't find a place that pertained to this. I do see a test in |
Hi @anurags92 @mangalaman93 , we use this flag to bypass ACL logins for users of shared backends. This flag IS in-use on all of our regional shared Dgraph clusters hosting shared and free customer backends. |
c3837f8
to
ccc5d6c
Compare
author Anurag <[email protected]> 1620201646 +0530 committer Anurag <[email protected]> 1675852162 +0530 parent d3bf7b7 author Anurag <[email protected]> 1620201646 +0530 committer Anurag <[email protected]> 1675851671 +0530 feat(cloud): add shared-instance flag in limit superflag in alpha (#7770) This PR adds a shared-instance flag to --limit superflag. When set to true (false by default), it will: - Restrict access to any of the ACL operations like Login, add/remove/update user from non-galaxy namespaces. - Prevent the leaking of environment variables for minio and aws. (cherry picked from commit 5f3cece)
ccc5d6c
to
a9616be
Compare
This PR adds a shared-instance flag to --limit superflag.
When set to true (false by default), it will:
(cherry picked from commit 5f3cece)