diff --git a/keps/sig-storage/3314-csi-changed-block-tracking/README.md b/keps/sig-storage/3314-csi-changed-block-tracking/README.md index b31f4360c8b..56d56de34e3 100644 --- a/keps/sig-storage/3314-csi-changed-block-tracking/README.md +++ b/keps/sig-storage/3314-csi-changed-block-tracking/README.md @@ -473,11 +473,9 @@ To mitigate the possibility that the token is spoofed: The proposal defines the following ClusterRoles to implement the necessary security as illustrated in the following figure: ->@TODO Update the figure -> - Use a white instead of transparent background -> - Change the names of these CRs and Roles +>@TODO > - Decide on namespaced v/s global SnapshotSessionConfiguration. Global will -> require a new role +> require a new role. ![CSI Snapshot Session Roles](./cbt-kep-multi-csi-roles.drawio.svg) diff --git a/keps/sig-storage/3314-csi-changed-block-tracking/cbt-kep-multi-csi-roles.drawio.svg b/keps/sig-storage/3314-csi-changed-block-tracking/cbt-kep-multi-csi-roles.drawio.svg index b74eb12829e..d2da07c0f7a 100644 --- a/keps/sig-storage/3314-csi-changed-block-tracking/cbt-kep-multi-csi-roles.drawio.svg +++ b/keps/sig-storage/3314-csi-changed-block-tracking/cbt-kep-multi-csi-roles.drawio.svg @@ -1,15 +1,16 @@ - + - + + -
+
@@ -21,66 +22,71 @@
- + csi driver namespace - - - - + + + + + + + -
+
- CsiSnapshotSessionData + SnapshotSessionData
- - CsiSnapsh... + + SnapshotS... - - - + + + -
+
- CsiSnapshotSessionService + + SnapshotSessionConfiguration +
- - CsiSnapsh... + + SnapshotS... - - - - - - - - + + + + + + + + -
+
CSI Driver Snapshot @@ -90,19 +96,16 @@
- + CSI Drive... - - - - + -
+
@@ -112,50 +115,47 @@
- + app namespace - - - - + + + + + -
+
- CsiSnapshotSessionAccess + SnapshotSessionRequest
- - CsiSnapsh... + + SnapshotS... - - - - - - - - + + + + + + + -
+
- - CSI - Snapshot @@ -166,25 +166,22 @@
- - CSISnaps... + + Snapshot... - - - - - + + + + + -
+
- - CSI - Snapshot @@ -195,20 +192,20 @@
- - CSISnaps... + + Snapshot... - - - - - + + + + + -
+
CSI Snapshot Session @@ -218,23 +215,23 @@
- + CSI Snap... - - - - - - - - + + + + + + + + -
+
Backup Client SA @@ -242,43 +239,43 @@
- + Backup C... - - - - - - + + + + + + -
+
- CSISnapshotSessionServiceClusterRole + SnapshotSessionServiceClusterRole
- - CSISnaps... + + Snapshot... - - - - + + + + -
+
@@ -288,16 +285,16 @@
- + Create, Get, Del... - + -
+
@@ -307,16 +304,16 @@
- + All permissions in... - + -
+
@@ -335,24 +332,24 @@
- + All permissions on the SessionDat... - - - - - - - - - + + + + + + + + + -
+
@@ -362,18 +359,18 @@
- + Cluste... - - - + + + -
+
@@ -383,18 +380,18 @@
- + RoleBi... - - - + + + -
+
@@ -404,18 +401,18 @@
- + Cluste... - - - + + + -
+
@@ -425,16 +422,16 @@
- + Servic... - + -
+

@@ -448,18 +445,18 @@

- + Key - - - + + + -
+
@@ -469,7 +466,7 @@
- + Custom... @@ -477,7 +474,7 @@ -
+
@@ -487,7 +484,7 @@
- + All permissions in th...