Comments (5)
Maybe I'm missing something here but it seems to me that the export command is doing the right thing:
curiefense/curiefense/curieconf/client/curieconf/cli/__init__.py
Lines 343 to 346 in 0ecb1e0
It downloads the conf from the server L345 and then exports that conf to the destination bucket, which in the case of a local path is file:///bucket/....
Isn't this the expected behavior? According to the docstring it looks like it is.
That said, it does fail if the local bucket directory doesn't exist, I've created the /bucket
dir manually and that seems to have solved the issue with the export when using file://
. After running the command, I see the conf files in the bucket dir
from curiefense.
It is indeed doing what it says it does: the client obtains the configuration from the server, then exports it. If the cloud bucket is an s3 bucket, then the client will write there (fails if the client doesn't have credentials); if it is a local path, then the client will write there (fails if the local path does not exist).
What I suggest is that the "writing to cloud storage" part be done by the server rather than the client. That is, curieconfctl
would request the server to export a config to a cloud bucket. The client would not write anything to the bucket: that would be done by the server.
from curiefense.
A-ha, thanks! Now I understand what you meant.
What do you think should be the right behavior when asking to export using local path? Should the server still export to a local path mounted in the server?
If I understand correctly the goal of the export
command in this context, I'd say that the config should be exported locally (where curieconfctl is running).
Another option I was considering is to add a flag --local
to the export command which indicates that the export has to be done by curieconfctl. If not passed, then the export will be done by the confserver
. We can use the latter as the default behavior.
Thoughts?
from curiefense.
Alright, I looked at this in more detail. We already have a function/command to export configs remotely and it's publish.
After looking at the API, the CLI implementation, and curieconf.utils
it looks like it does exactly what we want. However, using export
as the command name is confusing. Not sure how many tools are depending on it but we could plan on renaming it.
Am I missing something?
from curiefense.
Indeed, tool publish
does exactly what I needed. Thank you! #176 will fix this.
from curiefense.
Related Issues (20)
- Global filters - path and query as attr gets blocked the wrong way
- Content filter rules - we have "Log Message" field, but the message is not at the log
- Where to find the code that can generate grasshopper.so? HOT 1
- Change the log level of the message written when a request is blocked by lua HOT 2
- Reblaze Threats & Traffic Overview Grafana dashboards empty
- Machine "curiefense-ci-1" in CNCF Community Infrastructure Lab powered down and offline HOT 1
- Missing hardware requirements
- ACL + challenge action is not working correctly
- Provide a way to mask fields used as acl_triggers HOT 1
- Replace "cloudstorage" dependency
- curiefense's configuration does not applied dynamically to curieproxy(istio) pod.
- CNCF TOC annual review due HOT 3
- curieproxy-nginx Configuration changes partially take effect under multi-core
- Certificate at https://www.curiefense.io/ is invalid and needs to be fixed
- Using Curiefense for HTTPS traffic over Envoy
- Health of Curiefense project? HOT 6
- Update this repo with the actual project website url
- Would you become able to use curiefense in CasaOS and docker-compose?
- L3/4 DDoS Protection (Feature Request)
- Newer and better os support (Feature Request)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from curiefense.