potiuk commented on PR #397: URL: https://github.com/apache/kvrocks-controller/pull/397#issuecomment-4618469969
Thanks @git-hulk — pushed a revision folding your answers in: no built-in authn/authz today, so the unauthenticated API is expected behavior (with auth tracked in #390); TLS via a fronting proxy (Nginx) rather than built-in; credentials stored in the backing store; node addresses validated as real Kvrocks nodes; the metadata store + peer nodes trusted as honest (trusted-environment requirement); and split-brain handling deferred to the store engine (majority-win with Raft/ETCD/ZK). Residual items kept as §14 questions for the PMC. Ready when you are. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
