Hi,

This is Hai from LinkedIn. Daniel and I have been working on
productionizing Samza portable runner. BTW, Daniel didn't mention in his
previous email that he has enabled and validated Python 3 for Samza runner
and it worked smoothly. Kudos to the team!

Here I have a few security related questions about portability. At
LinkedIn, we enable SSL/TLS and ACLs for Kafka data and any data exchange.
In the case of portable runner, we're required to secure the data channels
between Java and Python processes as well because our Samza jobs are
running in a multi-tenant environment. While I'm currently working on this
on our internal branch, I do want to keep it clean and consistent with the
master branch.

My questions are: were there any plans/thoughts around security for
portability? I see that sdk_worker.py does have some codes to create
secured gRPC channels; is anyone actually leveraging those codes? I don't
see on the Java side any work is done, though.

Thanks,
Hai Lu

Reply via email to