There was a ticket created in (1) which wanted to make SSL context
creation pluggable / to fetch credentials remotely. I mentioned in (1)
that this is already possible to do as SSL context creation is
pluggable since CASSANDRA-16666.

The author of that ticket returned back saying that they used this
extensibility we provide (yay!) and they created an integration with
HashiCorp Vault (2).

Looking at the patch, there are no additional libraries /
dependencies, it just calls it via HTTP.

I want to ask if we can add this to the Cassandra codebase. While it
is a custom implementation and it is great that users integrate with
it, I think it is equally important to have this baked in so more
people can profit from this.

We already integrate various location providers
(AlibabaCloudLocationProvider, AzureCloudLocationProvider,
Ec2LocationProvider, GoogleCloudLocationProvider and so on) so there
is already a precedent in this kind of contributions which integrate
with external systems.

Are people OK with this?

Regards

(1) https://issues.apache.org/jira/browse/CASSANDRA-21153
(2) 
https://issues.apache.org/jira/secure/attachment/13080996/CASSANDRA-21153-vault-sslcontextfactory.patch

Reply via email to