imbajin commented on code in PR #3189:
URL: https://github.com/apache/hugegraph/pull/3189#discussion_r3965621502
##########
hugegraph-pd/docs/configuration.md:
##########
@@ -79,6 +79,41 @@ server:
- Metrics: `http://<host>:8620/actuator/metrics`
- Prometheus: `http://<host>:8620/actuator/prometheus`
+### REST Authentication Settings
+
+Every REST request except the probes below must carry HTTP Basic auth: one of
+the internal service names (`hg`, `store`, `hubble`, `vermeer`) as the user,
+and the shared secret as the password. A missing or wrong credential gets
+HTTP 401. Unauthenticated paths: `/v1/health`, `/actuator/**` and
+`/v1/prom/targets/*`.
Review Comment:
Fixed in 3075487 and ee98ef9. Added `/v1/ready` to the unauthenticated
endpoints list across all 4 documentation files to align with
`AuthenticationConfigurer`.
##########
hugegraph-store/docs/operations-guide.md:
##########
@@ -2,6 +2,21 @@
This guide covers monitoring, troubleshooting, backup & recovery, and
operational procedures for HugeGraph Store in production.
+> **PD REST credential.** Calls to a PD REST endpoint on port 8620, other than
+> `/v1/health`, `/actuator/**` and `/v1/prom/targets/*`, need HTTP Basic auth:
Review Comment:
Fixed in 3075487. Added the PD REST credential banner and `-u
hg:"${PD_SECRET}"` to the troubleshooting curl commands in
`hugegraph-store/docs/integration-guide.md`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
