[HDDS-8132] Secure S3 keys management

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Labels: pull-request-available
• Assignee: Maksim Myskov
• Reporter: Maksim Myskov
• Created: 10/Mar/23 09:07
• Updated: 20/May/23 07:14

Description

While attempting to get Ozone to production, we found several security flaws regarding S3 auth.

Some of them we have already done (HDDS-7191, HDDS-7815), some of them are in progress (HDDS-8050,HDDS-7814), and some are to be implemented.

This Jira has several purposes:

1. To be an umbrella Jira for work regarding improving S3 security
2. To share our vision regarding S3 security

I attached a design document that describes all the security flaws we have found. Eliminating them will drastically increase Ozone S3 security.

Issue Links

• is a parent of: HDDS-8050 Create HTTP endpoint to access S3 secret via Kerberos auth
• is a parent of: HDDS-7191 Create separate property for s3 admin
• is a parent of: HDDS-7814 Implement remote S3 secret storage
• is a parent of: HDDS-7815 Extract layer of S3 secret manipulation
• links to: GitHub Pull Request #4372