Alexey Serbin has uploaded this change for review. (
http://gerrit.cloudera.org:8080/13063
Change subject: WIP [master] RPC knobs to control authz privileges cache
......................................................................
WIP [master] RPC knobs to control authz privileges cache
WIP:
* I'd like to collect initial feedback on the approach used here:
** separate RPC service for authz cache control
(not in Master interface)
** assuming that 'real' authz provider will need to cache
information fetched from external privilege authority
to address latency issues talking to external systems
using RPC
** naming (the hardest part, yes)
* clarify on eviction Cache callback's lifecycle: it seems there is
an issue if destructing an instance of Cache when an entry is still
referenced by a handle. The 'eviction callback' is called upon
destruction of an entry, not upon eviction from the cache, actually.
But the eviction callback is a functor that is a member of TTLCache.
I'm thinking of rather invalidating cache entries instead.
* need to add tests
Change-Id: Ib9a5c1f84172acf5751f68edfb8a9bb25df6b3f6
---
M src/kudu/master/CMakeLists.txt
M src/kudu/master/authz_provider.h
M src/kudu/master/catalog_manager.cc
M src/kudu/master/catalog_manager.h
M src/kudu/master/default_authz_provider.h
M src/kudu/master/master.cc
A src/kudu/master/privileges_cache.proto
A src/kudu/master/privileges_cache_service.cc
A src/kudu/master/privileges_cache_service.h
M src/kudu/master/sentry_authz_provider.cc
M src/kudu/master/sentry_authz_provider.h
M src/kudu/master/sentry_privileges_fetcher.cc
M src/kudu/master/sentry_privileges_fetcher.h
13 files changed, 321 insertions(+), 53 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/63/13063/1
--
To view, visit http://gerrit.cloudera.org:8080/13063
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib9a5c1f84172acf5751f68edfb8a9bb25df6b3f6
Gerrit-Change-Number: 13063
Gerrit-PatchSet: 1
Gerrit-Owner: Alexey Serbin <aser...@cloudera.com>
