Date
24-Feb-2021
Attendees
- Mike Gorrell
- Marko Knepper
- Vasily Gancharov
- Zak Burke
- Jakub Skoczen
- Ian Walls
- Tod Olson
- VBar
- Marc Johnson
Discussion items
Time | Item | Who | Notes |
---|---|---|---|
Kafka Security | VBar and Vasily Gancharov | One of the changes that are being made as part of Iris is to drop PubSub (which uses Kafka and enforces FOLIO security via Okapi and FOLIO standard authentication methods) for Data Import and instead mode to direct Kafka Access. This raises security implications that didn't exist before. Vasily Gancharov has created a design for securing this design - Temporary Kafka security solution. Note that the Elastic Search work is also using this direct Kafka access. Vasily and Vince will present and answer questions. Notes:
Our conclusion is that in general this design is acceptable. There are open questions as to whether this can be implemented for R1 and what the ramifications are for Data Import and Elastic Search for R1. |