Updated Security Overview (markdown)

Chris Lu 2019-03-21 16:05:06 -07:00
parent 079c0a5eae
commit 2c013c17ca

@ -13,10 +13,10 @@ Server | Service | Note
master | gRPC | secured by mutual TLS
volume | gRPC | secured by mutual TLS
filer | gRPC | secured by mutual TLS
master | http REST | "weed master -disableHttp", disable http operations, only gRPC operations are allowed.
filer | http REST | "weed filer -disableHttp", disable http operations, only gRPC operations are allowed.
volume | http REST write | set `jwt.signing.key` in `security.toml` in master and volume servers to check token for write operations
volume | http REST read | unprotected, but url is not guessable
master | http | "weed master -disableHttp", disable http operations, only gRPC operations are allowed.
filer | http | "weed filer -disableHttp", disable http operations, only gRPC operations are allowed.
volume | http write | set `jwt.signing.key` in `security.toml` in master and volume servers to check token for write operations
volume | http read | unprotected, but url is not guessable
# Generate `security.toml` file