Uploaded image for project: 'Kudu'
  1. Kudu
  2. KUDU-2697

Implement a way to purge public parts of existing TSKs from all tablet servers and roll TSKs at masters

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: CLI, master, security, tserver
    • Labels:
      None

      Description

      For the use-cases when it's necessary to quickly cancel/revoke all authn/authz tokens issued so far, it's possible to do so by purging the public parts of TSKs at tablet servers and expire all existing TSKs at master.

      To do so, it's necessary to implement corresponding RPC at tablet servers and master. To present it as a tool, it's possible to add corresponding sub-command into the kudu CLI tool.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              aserbin Alexey Serbin
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: