The GitHub Actions job "Build and Run Tests by Maven" on 
rocketmq.git/feat/rip2-proxy-admin has succeeded.
Run started by GitHub user lizhimins (triggered by lizhimins).

Head commit for run:
250975389d49e4b3eab72cbeb9f048e8350a5970 / lizhimins <[email protected]>
feat(proxy): implement the Proxy Admin gRPC surface

Bind the upstream `Admin` service (apache/rocketmq/v2/admin.proto, all 16 RPCs)
on a dedicated, opt-in admin gRPC server on the proxy, isolated from the data
plane and gated by grpcAdminServerEnable (default off).

- Contract-honest implementation: every RPC either serves real data or answers
  with an explicit status; fields the open-source proxy cannot supply
  (GetProxyRuntimeStats in/out TPS, DescribeTopicStatus create_timestamp/tags,
  gRPC v2 GetConsumerRunningInfo process/consume tables) are left unset with an
  explanation instead of faked.
- Broker-facing RPCs go through an asynchronous AdminService gateway that fans
  out to all relevant brokers concurrently, with a per-hop deadline so a slow or
  unresponsive broker cannot hang the gRPC executor.
- Connection/subscription listings are cluster-visible: broker-side
  ConsumerConnection (remoting + peer-synced clients) merged with the proxy's
  ConsumerManager (local gRPC v2 clients), deduplicated by group+topic.
- Client-directed RPCs (PrintThreadStackTrace, VerifyMessage,
  GetConsumerRunningInfo) relay to the owning client's telemetry stream and are
  forwarded to the peer proxy that owns the client (ProxyAdminForwarder, guarded
  by x-mq-admin-forwarded).
- AdminSendMessage honours system properties for timer/FIFO messages;
  VerifyMessage relays the stored message body without re-inflating it.
- Dedicated proxy.admin.* ACL 2.0 resources with read-only / high-privilege
  action separation and a per-RPC audit log. Fail-closed mode
  (grpcAdminServerAuthEnable) requires both cluster authentication and
  authorization to be enabled, refusing otherwise so the ACL is truly enforced.
- rocketmq-proto builds the v2 stubs from the rocketmq-apis submodule (Maven +
  Bazel); the module skips Maven deploy.
- Config keys: grpcAdminServer{Enable,Port,AuthEnable,RequestTimeoutMillis}.
- Docs (docs/proxy-admin.md + docs/proxy-admin-zh.md) and unit tests.

Report URL: https://github.com/apache/rocketmq/actions/runs/34472600591

With regards,
GitHub Actions via GitBox

Reply via email to