This is an automated email from the ASF dual-hosted git repository.
LauraXia123 pushed a change to branch issue-12337
in repository https://gitbox.apache.org/repos/asf/gravitino.git
from 05bbd457c5 [#12337] fix(web): Preserve backend indexType casing when
editing ClickHouse tables
add 8bb68bc5d1 [#12252] docs: add entity secrets SPI and in-memory
provider design (#12249)
add 50c5b9531e [#11135] improvement(authz): Cache parsed OGNL AST to avoid
re-parsing per authorization (#12253)
add f1e0a2599a [MINOR] docs: Update server configuration and relational
backend storage pages (#12291)
add 3cd9553800 [#12255] fix(lance): authenticate the Lance REST service to
the Gravitino server (#12256)
add f350927f96 [#12289] web-v2(UI): fix about retains the previous
sub-path when switching filesets (#12292)
add 496f41e919 [MINOR] Remove Since Version references across the doc set
(#12321)
add 1773ede613 [#12218] feat(secret): Add GravitinoSecretProvider SPI and
in-memory provider (#12215)
add cbf0198fd5 [#12233] refactor(core): Support relation targets (#12234)
add 551c23378b [#12095] feat(auth): reject assumption of unheld active
roles with 403 (#12167)
add 5f418566ca [#12330] feat(core): Add user by-id APIs and alterUserById
via UserChange (#12332)
add 4be59c2597 [#12218] feat(secret): Add secret provider registry and
discovery API (#12295)
add 67b2b23fcd Merge branch 'main' into issue-12337
No new revisions were added by this update.
Summary of changes:
.../org/apache/gravitino/authorization/User.java | 15 +-
.../apache/gravitino/authorization/UserChange.java | 132 +++
.../apache/gravitino/secret/SecretConstants.java | 36 +-
.../org/apache/gravitino/secret/SecretUrn.java | 174 ++++
.../gravitino/authorization/TestUserChange.java | 30 +-
.../org/apache/gravitino/secret/TestSecretUrn.java | 77 ++
.../apache/gravitino/cli/commands/ListUsers.java | 5 +
.../apache/gravitino/client/TestPermission.java | 2 +
.../org/apache/gravitino/client/TestUserGroup.java | 2 +
.../gravitino/dto/authorization/UserDTO.java | 37 +-
.../apache/gravitino/dto/util/DTOConverters.java | 1 +
.../apache/gravitino/secret/SecretProvider.java | 84 ++
.../gravitino/secret/SecretProviderInfo.java | 109 ++
.../secret/memory/InMemorySecretsProvider.java | 98 ++
.../gravitino/dto/responses/TestResponses.java | 2 +-
.../secret/TestInMemorySecretsProvider.java | 91 ++
.../src/main/java/org/apache/gravitino/Entity.java | 12 +-
.../java/org/apache/gravitino/EntityStore.java | 10 +
.../java/org/apache/gravitino/GravitinoEnv.java | 23 +
.../org/apache/gravitino/RelationEdgeTarget.java | 81 ++
.../java/org/apache/gravitino/RelationQuery.java | 116 +++
.../java/org/apache/gravitino/RelationUpdate.java | 134 +++
...IdOperations.java => SupportsIdOperations.java} | 24 +-
.../gravitino/SupportsRelationOperations.java | 87 +-
.../authorization/AccessControlDispatcher.java | 40 +-
.../authorization/AccessControlManager.java | 22 +-
.../authorization/AuthorizationUtils.java | 39 +
.../authorization/GravitinoAuthorizer.java | 22 +
.../authorization/UserGroupExternalManager.java | 44 -
.../authorization/UserGroupIdManager.java | 138 +++
.../hook/AccessControlHookDispatcher.java | 14 +-
.../listener/AccessControlEventDispatcher.java | 41 +-
.../listener/api/event/DisableUserEvent.java | 65 --
.../api/event/DisableUserFailureEvent.java | 57 --
.../listener/api/event/DisableUserPreEvent.java | 55 -
.../listener/api/event/EnableUserEvent.java | 65 --
.../listener/api/event/EnableUserFailureEvent.java | 57 --
.../listener/api/event/EnableUserPreEvent.java | 55 -
.../gravitino/listener/api/info/UserInfo.java | 12 +
.../gravitino/secret/SecretProviderRegistry.java | 246 +++++
.../gravitino/storage/relational/JDBCBackend.java | 33 +
.../storage/relational/RelationalBackend.java | 29 +
.../storage/relational/RelationalEntityStore.java | 156 ++-
.../storage/relational/mapper/UserMetaMapper.java | 6 +
.../mapper/UserMetaSQLProviderFactory.java | 5 +
.../provider/base/UserMetaBaseSQLProvider.java | 17 +
.../relational/service/UserMetaService.java | 85 ++
.../TestGravitinoEnvSecretProviderRegistry.java | 72 ++
.../gravitino/TestSupportsRelationOperations.java | 186 ++++
.../authorization/TestAccessControlManager.java | 64 +-
.../listener/api/event/TestUserEvent.java | 18 +-
.../secret/TestSecretProviderRegistry.java | 111 ++
.../storage/memory/TestMemoryEntityStore.java | 67 +-
.../relational/TestRelationalEntityStore.java | 120 ++-
design-docs/gravitino-entity-secrets.md | 951 +++++++++++++++++
docs/apache-hive-catalog.md | 144 +--
docs/aws-glue-catalog.md | 112 +-
docs/fileset-catalog-with-adls.md | 36 +-
docs/fileset-catalog-with-cos.md | 28 +-
docs/fileset-catalog-with-gcs.md | 30 +-
docs/fileset-catalog-with-oss.md | 42 +-
docs/fileset-catalog-with-s3.md | 42 +-
docs/fileset-catalog.md | 112 +-
.../flink-authentication-with-gravitino.md | 28 +-
docs/flink-connector/flink-catalog-hive.md | 14 +-
docs/flink-connector/flink-catalog-iceberg.md | 18 +-
docs/flink-connector/flink-catalog-jdbc.md | 12 +-
docs/flink-connector/flink-catalog-paimon.md | 8 +-
docs/flink-connector/flink-connector.md | 64 +-
docs/gravitino-mcp-server.md | 148 +--
docs/gravitino-server-config.md | 1067 +++++++++++---------
docs/how-to-install.md | 2 +-
docs/how-to-use-gravitino-client.md | 14 +-
docs/how-to-use-gvfs.md | 110 +-
docs/how-to-use-relational-backend-storage.md | 211 ++--
docs/index.md | 2 +-
docs/jdbc-clickhouse-catalog.md | 44 +-
docs/jdbc-doris-catalog.md | 38 +-
docs/jdbc-hologres-catalog.md | 20 +-
docs/jdbc-mysql-catalog.md | 30 +-
docs/jdbc-oceanbase-catalog.md | 24 +-
docs/jdbc-postgresql-catalog.md | 24 +-
docs/jdbc-starrocks-catalog.md | 22 +-
docs/kafka-catalog.md | 16 +-
docs/lakehouse-hudi-catalog.md | 32 +-
docs/lakehouse-paimon-catalog.md | 84 +-
docs/lance-rest-service.md | 19 +
docs/lineage/gravitino-server-lineage.md | 30 +-
docs/lineage/gravitino-spark-lineage.md | 35 +-
docs/manage-jobs-in-gravitino.md | 32 +-
docs/manage-policies-in-gravitino.md | 2 +-
docs/manage-statistics-in-gravitino.md | 50 +-
docs/manage-tags-in-gravitino.md | 2 +-
docs/model-catalog.md | 12 +-
docs/security/authorization-pushdown.md | 50 +-
docs/security/credential-vending.md | 4 +-
docs/security/how-to-authenticate.md | 52 +-
docs/security/how-to-use-cors.md | 44 +-
docs/security/how-to-use-https.md | 56 +-
.../spark-authentication-with-gravitino.md | 28 +-
docs/spark-connector/spark-catalog-glue.md | 12 +-
docs/spark-connector/spark-catalog-hive.md | 6 +-
docs/spark-connector/spark-catalog-iceberg.md | 38 +-
docs/spark-connector/spark-catalog-jdbc.md | 12 +-
docs/spark-connector/spark-catalog-paimon.md | 10 +-
docs/spark-connector/spark-connector.md | 56 +-
docs/spark-connector/spark-integration-test.md | 18 +-
docs/trino-connector/authentication.md | 52 +-
docs/trino-connector/catalog-glue.md | 24 +-
docs/trino-connector/catalog-hive.md | 42 +-
docs/trino-connector/catalog-iceberg.md | 8 +-
docs/trino-connector/catalog-mysql.md | 20 +-
docs/trino-connector/configuration.md | 24 +-
...BaseMetadataAuthorizationMethodInterceptor.java | 31 +-
...bergMetadataAuthorizationMethodInterceptor.java | 56 +
lance/lance-common/build.gradle.kts | 1 +
.../gravitino/lance/common/config/LanceConfig.java | 51 +
.../gravitino/GravitinoLanceNamespaceWrapper.java | 74 +-
.../gravitino/TestGravitinoLanceClientAuth.java | 122 +++
.../integration/test/LanceRESTServiceAuthIT.java | 123 +++
.../AuthorizationExpressionEvaluator.java | 67 +-
.../authorization/jcasbin/JcasbinAuthorizer.java | 44 +
.../TestAuthorizationExpressionEvaluator.java | 127 +++
.../jcasbin/TestJcasbinAuthorizer.java | 95 ++
.../apache/gravitino/server/GravitinoServer.java | 4 +
.../server/web/SecretProvidersConfigServlet.java | 89 ++
.../web/filter/GravitinoInterceptionService.java | 24 +
.../gravitino/server/TestGravitinoServer.java | 87 ++
.../web/TestSecretProvidersConfigServlet.java | 136 +++
.../filter/TestGravitinoInterceptionService.java | 50 +
web-v2/web/src/app/catalogs/page.js | 1 +
.../entitiesContent/FilesetDetailsPage.js | 3 +-
.../rightContent/entitiesContent/ListFiles.js | 42 +-
133 files changed, 6604 insertions(+), 2213 deletions(-)
create mode 100644
api/src/main/java/org/apache/gravitino/authorization/UserChange.java
copy
core/src/main/java/org/apache/gravitino/listener/api/event/EnableMetalakePreEvent.java
=> api/src/main/java/org/apache/gravitino/secret/SecretConstants.java (56%)
create mode 100644 api/src/main/java/org/apache/gravitino/secret/SecretUrn.java
copy common/src/test/java/org/apache/gravitino/utils/TestRandomNameUtils.java
=> api/src/test/java/org/apache/gravitino/authorization/TestUserChange.java
(51%)
create mode 100644
api/src/test/java/org/apache/gravitino/secret/TestSecretUrn.java
create mode 100644
common/src/main/java/org/apache/gravitino/secret/SecretProvider.java
create mode 100644
common/src/main/java/org/apache/gravitino/secret/SecretProviderInfo.java
create mode 100644
common/src/main/java/org/apache/gravitino/secret/memory/InMemorySecretsProvider.java
create mode 100644
common/src/test/java/org/apache/gravitino/secret/TestInMemorySecretsProvider.java
create mode 100644
core/src/main/java/org/apache/gravitino/RelationEdgeTarget.java
create mode 100644 core/src/main/java/org/apache/gravitino/RelationQuery.java
create mode 100644 core/src/main/java/org/apache/gravitino/RelationUpdate.java
copy
core/src/main/java/org/apache/gravitino/{SupportsExternalIdOperations.java =>
SupportsIdOperations.java} (78%)
create mode 100644
core/src/main/java/org/apache/gravitino/authorization/UserGroupIdManager.java
delete mode 100644
core/src/main/java/org/apache/gravitino/listener/api/event/DisableUserEvent.java
delete mode 100644
core/src/main/java/org/apache/gravitino/listener/api/event/DisableUserFailureEvent.java
delete mode 100644
core/src/main/java/org/apache/gravitino/listener/api/event/DisableUserPreEvent.java
delete mode 100644
core/src/main/java/org/apache/gravitino/listener/api/event/EnableUserEvent.java
delete mode 100644
core/src/main/java/org/apache/gravitino/listener/api/event/EnableUserFailureEvent.java
delete mode 100644
core/src/main/java/org/apache/gravitino/listener/api/event/EnableUserPreEvent.java
create mode 100644
core/src/main/java/org/apache/gravitino/secret/SecretProviderRegistry.java
create mode 100644
core/src/test/java/org/apache/gravitino/TestGravitinoEnvSecretProviderRegistry.java
create mode 100644
core/src/test/java/org/apache/gravitino/TestSupportsRelationOperations.java
create mode 100644
core/src/test/java/org/apache/gravitino/secret/TestSecretProviderRegistry.java
create mode 100644 design-docs/gravitino-entity-secrets.md
create mode 100644
lance/lance-common/src/test/java/org/apache/gravitino/lance/common/ops/gravitino/TestGravitinoLanceClientAuth.java
create mode 100644
lance/lance-rest-server/src/test/java/org/apache/gravitino/lance/integration/test/LanceRESTServiceAuthIT.java
create mode 100644
server/src/main/java/org/apache/gravitino/server/web/SecretProvidersConfigServlet.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/TestSecretProvidersConfigServlet.java
