Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[audit] new provider attributes requirements: better identity (org, email, website correctness required) #196

Closed
andy108369 opened this issue Mar 16, 2024 · 6 comments
Assignees

Comments

@andy108369
Copy link
Contributor

We need to recommend new standards with provider identity with support email and website correctness as requirements for us to sign.
Identity is a key property for tenants to trust a provider.

https://akash.network/docs/providers/akash-audites-atributes/

@andy108369 andy108369 self-assigned this Mar 16, 2024
@andy108369
Copy link
Contributor Author

andy108369 commented Mar 18, 2024

List of current provider attributes for the providers that have been audited by akash1365yvmc4s7awdyj3n2sav7xfx76adc6dnmlx63

CLI used to generate the report:

AUDITOR=akash1365yvmc4s7awdyj3n2sav7xfx76adc6dnmlx63
provider-services query audit list -o json |
  jq --arg AUDITOR $AUDITOR -r '.providers[] | select(.auditor == $AUDITOR) | .owner' |
  while read PROVIDER; do
    provider-services query provider get $PROVIDER -o json | jq -r '[.owner, 
        (.attributes | map(select(.key == "host").value) | first), 
        (.attributes | map(select(.key == "tier").value) | first), 
        (.attributes | map(select(.key == "organization").value) | first),
        .info.email, 
        .info.website, 
        .host_uri] | @csv';
  done

# HEADER
echo '"owner","attributes.host","attributes.tier","attributes.organization","info.email","info.website","host_uri"'

It appears that some providers removed their host / tier / organization attributes despite they were previously audited (i.e. signed).

  • there have been 64 providers throughout the entire time that had their provider attributes signed with Akash address (akash1365yvmc4s7awdyj3n2sav7xfx76adc6dnmlx63)
  • only 5 providers (<8%) out of 64 had their info.email & info.website set (since that has never been a requirement for us to sign the provider attributes)
  • 13 providers (out of 64) are missing the organization attribute (organization: <ORG>)
  • 8 providers (out of 64) are missing the tier attribute (tier: community)
  • 3 providers (out of 64) are missing the host attribute (host: akash)

@andy108369
Copy link
Contributor Author

andy108369 commented Mar 26, 2024

@andy108369
Copy link
Contributor Author

@andy108369
Copy link
Contributor Author

andy108369 commented Apr 1, 2024

Updated table on 26 March 2024 16:18 UTC
https://gist.github.com/andy108369/31e354e424c964d2e4426f0ba05f7e8d

Updated table on 01 April 2024 18:19 UTC
https://gist.github.com/andy108369/aaf51c7aba9faf319dfadd8013a1b3e3

@andy108369
Copy link
Contributor Author

have unaudited 43 old/dead providers and those that haven't been upgrading since v0.4.8 (pre-feature-discovery).

Have announced in the #providers-attributes Discord channel, asking those from the list who wants to be re-audited to contact me or write in the providers Discord channel https://discord.com/channels/747885925232672829/1111749248527114322/1224434377690190005

@andy108369
Copy link
Contributor Author

Updated table on 20 April 2024 18:00 UTC
https://gist.github.com/andy108369/a7a84f75c63032573d9fdbabcc5ad09d

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant