Aias00 opened a new pull request, #1448:
URL: https://github.com/apache/rocketmq-dashboard/pull/1448
## Summary
- add an optional Apache instance `adminCredentialRef`; instances, API
responses, and audit records retain only this non-secret reference
- resolve the selected instance's external Spring-configured AK/SK into an
ACL 1.0 Remoting `RPCHook` before creating the runtime MQAdmin client
- isolate the runtime client cache by normalized NameServer endpoint and
credential reference, and release cached clients when an instance credential
reference changes
- add schema initialization and idempotent MySQL upgrade support for
`admin_credential_ref`
## Configuration
Configure credentials outside the database, for example through externalized
Spring configuration or a Kubernetes Secret:
```yaml
studio:
cluster:
admin:
credentials:
production-admin:
access-key: ${STUDIO_PRODUCTION_ADMIN_ACCESS_KEY}
secret-key: ${STUDIO_PRODUCTION_ADMIN_SECRET_KEY}
```
The instance stores only `production-admin`; access and secret keys are
never persisted or returned by instance APIs. A configured but
missing/incomplete reference fails with HTTP 422 before a network call.
Instances without a reference retain the existing unauthenticated behavior.
## Testing
- `JAVA_HOME=$( /usr/libexec/java_home -v 21 ) mvn
-Dtest=MqAdminExtFactoryTest,RuntimeAdminClientResolverTest,InstanceServiceTest
test`
- `npx vitest run src/pages/instance/__tests__/InstancePage.test.tsx
--reporter=dot`
- `npm run build`
Closes #1430
Part of #1312
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
