Andrew Wong has uploaded this change for review. ( http://gerrit.cloudera.org:8080/11751
Change subject: WIP KUDU-2543: pass around default authz tokens ...................................................................... WIP KUDU-2543: pass around default authz tokens WIP: add tests WIP: Also, given I'm passing around "all" privileges, we should be able to default this to true, but some tests don't use the client to send requests, and those tests would fail. WIP: think more about caching tokens in the client; right now it's very simple, but maybe that's ok. Adds authz token generation to the master's GetTabletSchema endpoint, with which clients can authorize themselves for specific tables via authz token. A client will cache these tokens and use them appropriately for RPCs that need them (e.g. Writes and Scans), reacquiring them when receiving word that they are expired. This adds no privilege-checking and only introduces basic token validations (e.g. should be well formed, not expired, etc.). I reused the authn verification RPC logic, but put it in the tablet server layer. Change-Id: I99555e0ab2d09d4abcbc12b1100658a9a17590f4 --- M src/kudu/client/batcher.cc M src/kudu/client/client-internal.cc M src/kudu/client/client-internal.h M src/kudu/client/scanner-internal.cc M src/kudu/client/scanner-internal.h M src/kudu/master/master.proto M src/kudu/master/master_service.cc M src/kudu/rpc/CMakeLists.txt M src/kudu/rpc/retriable_rpc.h M src/kudu/rpc/rpc_header.proto A src/kudu/rpc/rpc_verification_util.cc A src/kudu/rpc/rpc_verification_util.h M src/kudu/rpc/server_negotiation.cc M src/kudu/tserver/tablet_service.cc M src/kudu/tserver/tserver.proto 15 files changed, 387 insertions(+), 32 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/51/11751/1 -- To view, visit http://gerrit.cloudera.org:8080/11751 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I99555e0ab2d09d4abcbc12b1100658a9a17590f4 Gerrit-Change-Number: 11751 Gerrit-PatchSet: 1 Gerrit-Owner: Andrew Wong <[email protected]>
