ramackri opened a new pull request, #1137: URL: https://github.com/apache/ranger/pull/1137
## Summary First slice of [RANGER-5655](https://issues.apache.org/jira/browse/RANGER-5655) (Admin-managed Kafka audit partition plan & SPIFFE auth). Splits former [#1135](https://github.com/apache/ranger/pull/1135) into focused PRs. **JIRA:** [RANGER-5719](https://issues.apache.org/jira/browse/RANGER-5719) - Add shared **partition plan library** in `agents-common` (`PartitionPlan`, `PartitionPlanAllocator`, `PartitionPlanValidator`, routing helpers, `PolicyDownloadAuthUsersUtil`) - Add **SPIFFE / trusted-header utilities** in `common-utils` (`PluginHeaderAuthConfig`, `SpiffeIdentityResolver`) - Extend `RangerRESTClient` with `setTrustedAuthHeaders()` for outbound header auth (RANGER-5700 pattern) **Follow-on PRs (same feature):** - [RANGER-5720](https://issues.apache.org/jira/browse/RANGER-5720) — DB patch 078 (independent; can merge in parallel) - [RANGER-5723](https://issues.apache.org/jira/browse/RANGER-5723) — audit-server destination SPIFFE outbound (stacked on this PR) **Deferred:** - [RANGER-5721](https://issues.apache.org/jira/browse/RANGER-5721) — Admin REST + lifecycle hooks - [RANGER-5722](https://issues.apache.org/jira/browse/RANGER-5722) — Ingestor routing, inbound SPIFFE, Admin poller `AuditPluginIdResolver` intentionally omitted; lands with RANGER-5721. ## Test plan - [x] `mvn -pl agents-common,common-utils -am test` — partition plan + SPIFFE unit tests - [ ] CI: `build-17`, `plugins-docker-build`, `services-docker-build` Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
