Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Subtask] Chain authorization plugin framework #5775

Closed
Tracked by #5774
xunliu opened this issue Dec 5, 2024 · 0 comments · Fixed by #5786
Closed
Tracked by #5774

[Subtask] Chain authorization plugin framework #5775

xunliu opened this issue Dec 5, 2024 · 0 comments · Fixed by #5786
Assignees
@xunliu
Labels
0.8.0 Release v0.8.0 subtask Subtasks of umbrella issue

Comments

@xunliu
Copy link
Member

xunliu commented Dec 5, 2024 •
edited
Loading

Describe the subtask

Chain authorization plugin supports pushdown a role to multiple underlying data source.

  1. Chain auth plugin includes multiple plugin instances.
  2. Chain auth plugin loop executes pushdown interface in the multiple plugin instances.
  3. Support wildcard properties to configuration multi-plugin properties.
Chain authorization properties
    properties.put("authorization-provider", "chain");
    properties.put("authorization.chain.plugins", "hive1,hdfs1");
    properties.put("authorization.chain.hive1.provider", "ranger");
    properties.put("authorization.chain.hive1.ranger.auth.type", "simple");
    properties.put("authorization.chain.hive1.ranger.admin.url", "http://localhost:6080");
    properties.put("authorization.chain.hive1.ranger.username", "admin");
    properties.put("authorization.chain.hive1.ranger.password", "admin");
    properties.put("authorization.chain.hive1.ranger.service.type", "hive");
    properties.put("authorization.chain.hive1.ranger.service.name", "hiveDev");
    properties.put("authorization.chain.hdfs1.provider", "ranger");
    properties.put("authorization.chain.hdfs1.ranger.auth.type", "simple");
    properties.put("authorization.chain.hdfs1.ranger.admin.url", "http://localhost:6080");
    properties.put("authorization.chain.hdfs1.ranger.username", "admin");
    properties.put("authorization.chain.hdfs1.ranger.password", "admin");
    properties.put("authorization.chain.hdfs1.ranger.service.type", "hadoop");
    properties.put("authorization.chain.hdfs1.ranger.service.name", "hdfsDev");

Parent issue

#5774
@xunliu xunliu added subtask Subtasks of umbrella issue 0.8.0 Release v0.8.0 labels Dec 5, 2024
@xunliu xunliu self-assigned this Dec 5, 2024
@xunliu xunliu mentioned this issue Dec 5, 2024
Open
7 tasks
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 5, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
dfffc5e
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 6, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
9afea01
@xunliu xunliu mentioned this issue Dec 6, 2024
Merged
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 19, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
5092e45
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 23, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
4755a53
@xunliu xunliu changed the title [Subtask] Chain authorization plugin [Subtask] Chain authorization plugin framework Dec 23, 2024
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 23, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
58afc7c
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 23, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
f7ebd44
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 23, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
5a29c05
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 23, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
a19a314
xunliu added a commit to xunliu/gravitino that referenced this issue Dec 24, 2024
@xunliu
[apache#5775] feat(auth): Chain authorization plugin
fe7b35b
Abyss-lord pushed a commit to Abyss-lord/gravitino that referenced this issue Dec 29, 2024
@xunliu @Abyss-lord
[apache#5775] feat(auth): Chain authorization plugin framework (apach…
13cd1a9 
…e#5786)

### What changes were proposed in this pull request?

1. Add Chain auth plugin module
1. Add auth common module
3. Add Chain authorization Ranger Hive and Ranger HDFS ITs

### Why are the changes needed?

Fix: apache#5775

### Does this PR introduce _any_ user-facing change?

N/A

### How was this patch tested?

Add ITs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@xunliu xunliu

Labels
0.8.0 Release v0.8.0 subtask Subtasks of umbrella issue
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[#5775] feat(auth): Chain authorization plugin framework xunliu/gravitino
1 participant
@xunliu