Alexey Serbin has posted comments on this change. ( http://gerrit.cloudera.org:8080/24413 )
Change subject: Add security threat model and wire AGENTS.md -> SECURITY.md -> THREAT_MODEL.md ...................................................................... Patch Set 1: (4 comments) Overall this makes sense at first glance. As for updates/revving this patch, do you plan to address/update this incorporating the review feedback, or you'd rather want somebody from Kudu commiters/PMC took ownership from this point on? Thanks a lot! http://gerrit.cloudera.org:8080/#/c/24413/1/THREAT_MODEL.md File THREAT_MODEL.md: http://gerrit.cloudera.org:8080/#/c/24413/1/THREAT_MODEL.md@42 PS1, Line 42: an HTTP : **Web UI** exposes status/metrics. As of 2026-06-05, there is also REST-style API that's served by the embedded webserver of a Kudu master and provides a means to perform DDL operations on Kudu tables. http://gerrit.cloudera.org:8080/#/c/24413/1/THREAT_MODEL.md@77 PS1, Line 77: ditto: there is also REST API served by master's embedded web server, enabled by the --enable_rest_api flag. http://gerrit.cloudera.org:8080/#/c/24413/1/THREAT_MODEL.md@176 PS1, Line 176: Unauthenticated network client Does this implicitly include various DoS/DDoS scenarios or those are out of scope for v0 security threat models? http://gerrit.cloudera.org:8080/#/c/24413/1/THREAT_MODEL.md@277 PS1, Line 277: - Assuming on-disk data is encrypted without `--encrypt_data_at_rest`. If it makes sense, I'd think of adding one more item: assuming loopback RPC connections are encrypted with --rpc_encryption=required. This corresponds to an item mentioned in paragraph 9. Even with --rpc_connection=required, loopback RPC connections aren't protected with TLS by default. To enable encryption for loopback RPC connections, add the --rpc_encrypt_loopback_connections flag. https://kudu.apache.org/docs/configuration_reference.html#kudu-master_rpc_encrypt_loopback_connections https://kudu.apache.org/docs/configuration_reference.html#kudu-tserver_rpc_encrypt_loopback_connections -- To view, visit http://gerrit.cloudera.org:8080/24413 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I41a29e63e09430abc8812ca4edc2e8665d19ab6b Gerrit-Change-Number: 24413 Gerrit-PatchSet: 1 Gerrit-Owner: Anonymous Coward <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Comment-Date: Mon, 08 Jun 2026 21:23:58 +0000 Gerrit-HasComments: Yes
