[KUDU-2697] Implement a way to purge public parts of existing TSKs from all tablet servers and roll TSKs at masters

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: CLI, master, security, tserver
• Assignee: Unassigned
• Reporter: Alexey Serbin
• Created: 12/Feb/19 04:24
• Updated: 12/Feb/19 04:24

Description

For the use-cases when it's necessary to quickly cancel/revoke all authn/authz tokens issued so far, it's possible to do so by purging the public parts of TSKs at tablet servers and expire all existing TSKs at master.

To do so, it's necessary to implement corresponding RPC at tablet servers and master. To present it as a tool, it's possible to add corresponding sub-command into the kudu CLI tool.