[
https://issues.apache.org/jira/browse/HDDS-15845?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Abhishek Pal updated HDDS-15845:
--------------------------------
Description:
This is to track the creation of a standalone process that becomes the single
owner of client-facing authentication and authorization for all Ozone metadata
operations.
It validates any supported credential type (Kerberos, S3 signatures,
OAuth/OIDC, STS), evaluates authorization policy, and issues a short-lived
cryptographically-signed token that OM verifies locally.
P.S: We are going to create subtasks for this EPIC once the design and goals
reach consensus.
was:
This is to track the creation of a standalone process that becomes the single
owner of client-facing authentication and authorization for all Ozone metadata
operations.
It validates any supported credential type (Kerberos, S3 signatures,
OAuth/OIDC, STS), evaluates authorization policy, and issues a short-lived
cryptographically-signed token that OM verifies locally.
> Implement Protocol-Neutral Pluggable Authentication and Authorization Service
> -----------------------------------------------------------------------------
>
> Key: HDDS-15845
> URL: https://issues.apache.org/jira/browse/HDDS-15845
> Project: Apache Ozone
> Issue Type: Epic
> Components: Ozone Client, Ozone Manager
> Reporter: Abhishek Pal
> Assignee: Abhishek Pal
> Priority: Major
>
> This is to track the creation of a standalone process that becomes the single
> owner of client-facing authentication and authorization for all Ozone
> metadata operations.
> It validates any supported credential type (Kerberos, S3 signatures,
> OAuth/OIDC, STS), evaluates authorization policy, and issues a short-lived
> cryptographically-signed token that OM verifies locally.
> P.S: We are going to create subtasks for this EPIC once the design and goals
> reach consensus.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
