Uploaded image for project: 'Data Collection, Analytics, and Events'
  1. Data Collection, Analytics, and Events
  2. DCAEGEN2-2329

REQ-358 No root (superuser) access to database from application container

    XMLWordPrintable

Details

    Description

      As a DCAE maintainer, I would all DCAE components have DB access be complaint to below requirement 

      1.Application container must not access DB as a root
      2.Dedicated user with privileges limited to only those really required should be used
      3.Application may initialized DB using root account from a dedicated job container

      All service components using pgaas plugin are complaint by default. Following components will need to be assessed.

      • DCAE-Dashboard (Platform component using PG)
      • DCAE-Inventory (Platform comping using PG)
      • TCA-gen2 (mongo)
      • Heartbeat (Postgres)
      • PM-Mapper (mongo)
      • SON-handler 
      • DataLake-Feeder 

      + New Microservices being introduced for Guilin (DES, Slice Analysis MS)

       

      02/12/2021  - DCAE Dashboard/Inventory update are not required. These components will be deprecated once DCAE Helm transformation work is done.

       

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              ahilap Ahila P
              vv770d Vijay Venkatesh Kumar
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: