yuqi1129 commented on code in PR #11354:
URL: https://github.com/apache/gravitino/pull/11354#discussion_r3373261037
##########
catalogs/catalog-common/src/main/java/org/apache/gravitino/catalog/hive/HiveConstants.java:
##########
@@ -30,6 +30,8 @@ public class HiveConstants {
public static final String PRINCIPAL = "kerberos.principal";
public static final String CHECK_INTERVAL_SEC =
"kerberos.check-interval-sec";
public static final String FETCH_TIMEOUT_SEC =
"kerberos.keytab-fetch-timeout-sec";
+ public static final String KEYTAB_FETCH_ALLOW_LOCAL_ADDRESS =
Review Comment:
Renamed it to `keytab-fetch-block-unsafe-address` (and `blockUnsafeAddress`
for the server config). The validator also blocks multicast, unspecified, and
cloud metadata addresses, so `unsafe address` reflects the complete set better
than `local` or `private`. The blocking option now defaults to `true`; users
can explicitly set it to `false` for trusted URIs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
