-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[DPE-5206] Add DIGEST scheme ACL to znode created by zookeeper #97
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, but I will wait for Marc's opinion on it!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
I suppose the integration tests for testing this would be in Kyuubi. Would it be very hard to make an integration tests to make sure it works? If it means more than 4h of work, it is not worth it, I believe
acls = kwargs["acls"] | ||
assert len(acls) == 2 | ||
assert len([acl for acl in acls if acl.perms == 31 and acl.id.scheme == "sasl"]) != 0 | ||
assert len([acl for acl in acls if acl.perms == 31 and acl.id.scheme == "digest"]) != 0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
question what is the 31
magic number?
This PR adds an additional ACL with "DIGEST" scheme to the znodes created by zookeeper. This is needed because Kyuubi uses DIGEST ACL to create / write znodes and is not able to access the znodes created by zookeeper otherwise.