influxdata / influxdata/influxdb

Authentication for database backup

Open
#21,092 5 comments 2 reactions 0 assignees View on GitHub
area/2.x area/auth area/backup and restore
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

__Proposal:__
In order to create a backup of an influxdb2 instance, you need to enable the root token. That is not practical in particular for daily backup as it requires the root token to be always enabled.

__Current behavior:__
Currently, the root token is required [as per documentation](https://docs.influxdata.com/influxdb/v2.0/backup-restore/backup/)

__Desired behavior:__
Find a different way that will not require to have the powermost token to be enabled.

__Alternatives considered:__
Either one of the two:
- Create a dedicated token for backups
- If you have superuser access to the machine, then allow the request to go through with different means of authentication

__Use case:__
In our case we run daily backups with scripts overnight and for that case we must have the root token always enabled, which is something we would like to avoid to improve security.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the backup documentation linked in the issue and the current requirement for the root token. Compare the proposed dedicated-token and alternate authentication approaches; done means daily backups can run without keeping the root token enabled, with the resulting behavior documented.

Written by the indexing model from the issue text.

Assessment

Domain
database, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.