Repository navigation
Allow k8s administrators to override ZNode path #681
Description
This is currently not allowed because it would let users escalate "Is allowed to create sandboxed ZNodes" to "Is allowed to take ownership of any named ZNode".
However, this is preventing users from restoring failed clusters from backups, since there is no way to influence the UID generation at all. One possible compromise would be to introduce a new field ZookeeperZnode.status.znodePath, which defaults to /{uid}. This would let administrators status-patch the object to override the path, while regular users are typically prohibited (by K8s) from editing the status subresource.
Metadata
Metadata
Assignees
Type
Projects
- Status
Activity
sbernauer commentedon Apr 5, 2024
LGTM
nightkr commentedon Apr 10, 2024
Moving this into the voting phase.
nightkr commentedon Apr 17, 2024
No dissent, considering this accepted.
lfrancke commentedon May 6, 2024
Is this anything we documented?
sbernauer commentedon May 6, 2024
Is this already implemented? #799 looks like the implementation and is not merged yet
lfrancke commentedon May 6, 2024
I don't know. I found this in the
Donecolumnnightkr commentedon May 16, 2024
Not sure how this got moved to done, #799 has indeed not been reviewed yet.
It's documented in the PR, but since that still hasn't been merged...
lfrancke commentedon Jun 26, 2024
As this has been merged now, can you please include a link to the generated docs?
nightkr commentedon Jun 27, 2024
@lfrancke https://docs.stackable.tech/home/nightly/zookeeper/usage_guide/isolating_clients_with_znodes#_restoring_from_backups