hangc0276 opened a new pull request, #19824: URL: https://github.com/apache/pulsar/pull/19824
### Motivation PR https://github.com/apache/pulsar/pull/19455 introduced break change and has been cherry-picked to release branch-2.10. It will lead to users upgrading to the new release version authenticate failed. We need to revert all the related PRs. ### Modifications - Revert "[fix][broker] Allow proxy to pass same role for authRole and originalRole (#19557)" This reverts commit 4da2487e5c4730732a882734ab09cac38e7c12c5. - Revert "[fix][broker] Make authentication refresh threadsafe (#19506)" This reverts commit 26e10536773498cfd0a4514256456795658dd6d8. - Revert "[fix][test] ProxyWithAuthorizationTest remove SAN from test certs (#19594)" This reverts commit 14152fc5fb61ae7ffef22118fb59f29339fef5fd. - Revert "[fix][broker] Correct MockAlwaysExpiredAuthenticationState test impl" This reverts commit 09f00eea93c019919147ea249201aa9f7930cdbc. - Revert "[fix][broker] Call originalAuthState.authenticate in ServerCnx" This reverts commit 1935f070cf29d727f2b400139f05ba0d35dd5017. - Revert "[improve][broker] Add test to verify authRole cannot change (#19430)" This reverts commit 0231ad30d78956dbc313701f9a20723db8abe0e5. - Revert "[feat][broker] Cherry-pick tests from (#19409)" This reverts commit 557b72dd029c3fd8cc61caafe1ed2c84b97ba641. - Revert "[improve][broker] ServerCnx: go to Failed state when auth fails (#19312)" This reverts commit 467cd3239f116cc20bed059483b03b1edcc131ec. - Revert "[improve][broker] Require authRole is proxyRole to set originalPrincipal (#19455)" This reverts commit 6a599af216f4e7fe09e31732d128eccc9c2d7ec4. <!-- Describe the modifications you've done. --> ### Verifying this change - [ ] Make sure that the change passes the CI checks. *(Please pick either of the following options)* This change is a trivial rework / code cleanup without any test coverage. *(or)* This change is already covered by existing tests, such as *(please describe tests)*. *(or)* This change added tests and can be verified as follows: *(example:)* - *Added integration tests for end-to-end deployment with large payloads (10MB)* - *Extended integration test for recovery after broker failure* ### Does this pull request potentially affect one of the following parts: <!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. --> *If the box was checked, please highlight the changes* - [ ] Dependencies (add or upgrade a dependency) - [ ] The public API - [ ] The schema - [ ] The default values of configurations - [ ] The threading model - [ ] The binary protocol - [ ] The REST endpoints - [ ] The admin CLI options - [ ] The metrics - [ ] Anything that affects deployment ### Documentation <!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. --> - [ ] `doc` <!-- Your PR contains doc changes. --> - [ ] `doc-required` <!-- Your PR changes impact docs and you will update later --> - [x] `doc-not-needed` <!-- Your PR changes do not impact docs --> - [ ] `doc-complete` <!-- Docs have been already added --> ### Matching PR in forked repository PR in forked repository: <!-- ENTER URL HERE --> <!-- After opening this PR, the build in apache/pulsar will fail and instructions will be provided for opening a PR in the PR author's forked repository. apache/pulsar pull requests should be first tested in your own fork since the apache/pulsar CI based on GitHub Actions has constrained resources and quota. GitHub Actions provides separate quota for pull requests that are executed in a forked repository. The tests will be run in the forked repository until all PR review comments have been handled, the tests pass and the PR is approved by a reviewer. --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
