dev@knox.apache.org, 2026-09

You are viewing a plain text version of this content. The canonical link for it is here.

- Re: [PR] KNOX-3426 - Add DelegationPolicyService schema, interface, and JDBC implementation [knox] - posted by "hsheinblatt (via GitHub)" <gi...@apache.org> on 2026/09/01 03:26:15 UTC, 9 replies.
- [jira] [Work logged] (KNOX-3426) Delegation policy schema and JDBC implementation - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/01 03:27:00 UTC, 15 replies.
- [jira] [Created] (KNOX-3429) knox--src.zip can balloon far beyond its expected size (~40 MB -> GBs) and fail to stage to the Apache dist repo. - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/01 09:57:00 UTC, 0 replies.
- [PR] KNOX-3429: Harden source assembly to exclude build caches, runtime state, and staging dir [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/01 10:05:31 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3429) knox--src.zip can balloon far beyond its expected size (~40 MB -> GBs) and fail to stage to the Apache dist repo. - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/01 10:06:00 UTC, 2 replies.
- [jira] [Updated] (KNOX-3429) knox--src.zip can balloon far beyond its expected size (~40 MB -> GBs) and fail to stage to the Apache dist repo. - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/01 10:07:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3429) knox--src.zip can balloon far beyond its expected size (~40 MB -> GBs) and fail to stage to the Apache dist repo. - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/01 11:58:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3430) Improve AccessTokenFederationFilter with expected-audience - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/01 12:05:00 UTC, 0 replies.
- [PR] KNOX-3419: Tests for the recent improvements [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/01 12:16:03 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3419) Add docker based tests for recent improvements - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/01 12:17:00 UTC, 2 replies.
- [jira] [Updated] (KNOX-3430) Deprecate AccessTokenFederationFilter - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/01 13:07:00 UTC, 2 replies.
- [PR] KNOX-3430: Deprecate AccessTokenFederationFilter, also added Unsuppor… [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/01 13:24:29 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3430) Deprecate AccessTokenFederationFilter - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/01 13:25:00 UTC, 2 replies.
- [PR] KNOX-3422: Update service_ldap_server.md [knox] - posted by "handavid (via GitHub)" <gi...@apache.org> on 2026/09/01 15:18:33 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3422) LDAP Proxy shouldn't create user from gateway.ldap.bind.user config - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/01 15:19:00 UTC, 3 replies.
- [jira] [Created] (KNOX-3431) LDAP Proxy search should throw exception when any backend fails - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/02 01:47:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3431) LDAP Proxy search should throw exception when any backend fails - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/02 01:48:00 UTC, 0 replies.
- [PR] KNOX-3431: UserSearchInterceptor throws exceptions on failed search [knox] - posted by "handavid (via GitHub)" <gi...@apache.org> on 2026/09/02 01:53:23 UTC, 5 replies.
- [jira] [Work logged] (KNOX-3431) LDAP Proxy search should throw exception when any backend fails - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/02 01:54:00 UTC, 5 replies.
- [jira] [Commented] (KNOX-3422) LDAP Proxy shouldn't create user from gateway.ldap.bind.user config - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/02 06:25:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3427) Upgrade Netty to 4.1.137.Final - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/02 07:20:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3430) Deprecate AccessTokenFederationFilter - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/02 07:22:00 UTC, 1 replies.
- [jira] [Resolved] (KNOX-3430) Deprecate AccessTokenFederationFilter - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/02 07:24:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3427) Upgrade Netty to 4.1.137.Final - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/02 07:24:00 UTC, 0 replies.
- Re: [PR] Reject authorization codes on OAuth state mismatch [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/02 07:36:36 UTC, 0 replies.
- [jira] [Commented] (KNOX-3419) Add docker based tests for recent improvements - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/02 07:40:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3419) Add docker based tests for recent improvements - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/02 07:40:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3419) Add docker based tests for recent improvements - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/02 07:40:00 UTC, 0 replies.
- Re: [PR] KNOX-3424: Dynamic audience handling in the KNOXTOKEN service [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/02 07:45:06 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3424) Dynamic audience handling in the KNOXTOKEN service - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/02 07:46:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3424) Dynamic audience handling in the KNOXTOKEN service - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/02 07:46:00 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3424) Dynamic audience handling in the KNOXTOKEN service - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/02 07:46:00 UTC, 9 replies.
- [jira] [Updated] (KNOX-3424) Dynamic audience handling in the KNOXTOKEN service - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/02 07:46:00 UTC, 0 replies.
- Re: [PR] Bump org.apache.derby:derby from 10.14.2.0 to 10.17.1.0 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/02 07:46:40 UTC, 2 replies.
- [VOTE] Release Apache Knox 3.0.0 - posted by Tamás Hanicz <ha...@gmail.com> on 2026/09/02 09:39:08 UTC, 5 replies.
- [PR] KNOX-3424: Complete RFC 8707/8693 dynamic resource/audience handling in KNOXTOKEN and token exchange [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/02 09:52:55 UTC, 8 replies.
- [jira] [Commented] (KNOX-3431) LDAP Proxy search should throw exception when any backend fails - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/02 15:24:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3355) Trusted OIDC Issuer service and storage for Knox IDF - posted by "Larry McCay (Jira)" <ji...@apache.org> on 2026/09/02 18:17:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3432) In knoxidf, advertise token exchange in grant_types_supported - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/02 23:28:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3433) knoxidf token exchange response must include issued_token_type - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/02 23:57:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3434) Token validation for oidc trusted issuers skips typ validation so k8s projected tokens can be used - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/03 02:08:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3426) Delegation policy schema and JDBC implementation - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/03 06:39:00 UTC, 1 replies.
- [PR] KNOX-3426: Embedded-Derby delegation policy service [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/03 09:40:15 UTC, 5 replies.
- [jira] [Created] (KNOX-3435) Reject authorization codes on OAuth state mismatch - posted by "Andrew Rukin (Jira)" <ji...@apache.org> on 2026/09/03 12:40:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3436) Move JDBC table provisioning to a pure SQL layer; drop the Java-side DDL parsing - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 12:52:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3432) In knoxidf, advertise token exchange in grant_types_supported - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 12:55:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3433) knoxidf token exchange response must include issued_token_type - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 12:55:00 UTC, 0 replies.
- Re: [PR] KNOX-3435: Reject authorization codes on OAuth state mismatch [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/03 13:03:27 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3435) Reject authorization codes on OAuth state mismatch - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/03 13:04:00 UTC, 3 replies.
- [PR] KNOX-3433: set issued_token_type in KnoxIDF token responses (RFC 8693 §2.2.1) [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/03 13:41:48 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3433) knoxidf token exchange response must include issued_token_type - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/03 13:42:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3435) Reject authorization codes on OAuth state mismatch - posted by "Andrew Rukin (Jira)" <ji...@apache.org> on 2026/09/03 14:28:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3435) Reject authorization codes on OAuth state mismatch - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 15:07:00 UTC, 0 replies.
- [PR] KNOX-3432: Advertise RFC 8693 token-exchange grant type in KnoxIDF discovery metadata [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/03 15:15:17 UTC, 4 replies.
- [jira] [Work logged] (KNOX-3432) In knoxidf, advertise token exchange in grant_types_supported - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/03 15:16:00 UTC, 4 replies.
- [jira] [Created] (KNOX-3437) Address comments in PR 1373 - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 15:31:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3433) knoxidf token exchange response must include issued_token_type - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/03 15:54:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3426) Delegation policy schema and JDBC implementation - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 16:10:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3401) Switch OOTB JDBC-based token state service from Derby to something else - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/03 16:57:00 UTC, 2 replies.
- [PR] KNOX-3434 - Allow missing typ when validating JWTs from TrustedOidcIssuers for token exchange. [knox] - posted by "hsheinblatt (via GitHub)" <gi...@apache.org> on 2026/09/03 21:01:41 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3434) Token validation for oidc trusted issuers skips typ validation so k8s projected tokens can be used - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/03 21:02:00 UTC, 2 replies.
- [jira] [Created] (KNOX-3438) Delegation policy admin API for Knox IDF - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/03 23:00:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3434) Token validation for oidc trusted issuers skips typ validation so k8s projected tokens can be used - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/04 15:52:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3439) Add unit tests for NoClassNameMultiLineToStringStyle - posted by "Raghav Maheshwari (Jira)" <ji...@apache.org> on 2026/09/05 10:42:00 UTC, 0 replies.
- [PR] KNOX-3439: Add tests for NoClassNameMultiLineToStringStyle [knox] - posted by "Raghav-Mah3shwari (via GitHub)" <gi...@apache.org> on 2026/09/05 10:52:00 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3439) Add unit tests for NoClassNameMultiLineToStringStyle - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/05 10:53:00 UTC, 2 replies.
- [PR] KNOX-3438: Add delegation policy admin API with upsert support for RFC 8693 token exchange [knox] - posted by "hsheinblatt (via GitHub)" <gi...@apache.org> on 2026/09/06 17:41:56 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3438) Delegation policy admin API for Knox IDF - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/06 17:42:00 UTC, 7 replies.
- [PR] KNOX-3401: Replace Derby with H2 [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/06 19:58:27 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3401) Switch OOTB JDBC-based token state service from Derby to something else - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/06 19:59:00 UTC, 7 replies.
- [jira] [Commented] (KNOX-3438) Delegation policy admin API for Knox IDF - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/07 08:40:00 UTC, 1 replies.
- [PR] KNOX-3438: Address review comments from delegation policy admin API [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/07 10:17:11 UTC, 3 replies.
- [jira] [Commented] (KNOX-3439) Add unit tests for NoClassNameMultiLineToStringStyle - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/07 18:43:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3432) In knoxidf, advertise token exchange in grant_types_supported - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/07 20:37:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3440) Drop HSQL DB - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/08 07:20:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/08 07:53:00 UTC, 0 replies.
- [PR] KNOX-3440: Remove HSQLDB completely from Knox [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/08 08:31:02 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3440) Drop HSQL DB - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/08 08:32:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3440) Drop HSQL DB - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/08 09:33:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3439) Add unit tests for NoClassNameMultiLineToStringStyle - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/08 13:06:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3442) Harden H2 JDBC URL construction against connection-string injection via gateway.database.name - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/08 13:09:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3442) Harden H2 JDBC URL construction against connection-string injection via gateway.database.name - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/08 13:10:00 UTC, 0 replies.
- [PR] KNOX-3442: Reject INIT/RUNSCRIPT/ALIAS in H2 database name to prevent JDBC-URL code execution [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/08 13:43:21 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3442) Harden H2 JDBC URL construction against connection-string injection via gateway.database.name - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/08 13:44:00 UTC, 2 replies.
- Re: [VOTE] Release Apache Knox 2.1.1 - posted by Phil Zampino <pz...@apache.org> on 2026/09/08 16:27:10 UTC, 1 replies.
- [PR] KNOX-3421 - Escape LDAP DN values in KnoxLdapRealm [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/09/08 21:05:27 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3421) Upgrade Shiro to 2.2.1 - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/08 21:06:00 UTC, 1 replies.
- [RESULT][VOTE] Release Apache Knox 3.0.0 - RC 2 - posted by Tamás Hanicz <ha...@gmail.com> on 2026/09/09 06:35:29 UTC, 0 replies.
- [jira] [Commented] (KNOX-3442) Harden H2 JDBC URL construction against connection-string injection via gateway.database.name - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/09 07:31:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3421) Upgrade Shiro to 2.2.1 - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/09 07:39:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3440) Drop HSQL DB - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 07:52:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3442) Harden H2 JDBC URL construction against connection-string injection via gateway.database.name - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 07:52:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3433) knoxidf token exchange response must include issued_token_type - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 07:53:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3432) In knoxidf, advertise token exchange in grant_types_supported - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 07:53:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3443) Add unit test coverage for MimeTypes - posted by "Raghav Maheshwari (Jira)" <ji...@apache.org> on 2026/09/09 09:31:00 UTC, 0 replies.
- [PR] NOX-3443: dd unit test coverage for MimeTypes [knox] - posted by "Raghav-Mah3shwari (via GitHub)" <gi...@apache.org> on 2026/09/09 09:33:20 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3434) Token validation for oidc trusted issuers skips typ validation so k8s projected tokens can be used - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 09:39:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3438) Delegation policy admin API for Knox IDF - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 09:43:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use - posted by "Tamás Marcinkovics (Jira)" <ji...@apache.org> on 2026/09/09 09:48:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3445) KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/09 12:04:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3445) KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/09 13:23:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-2900) KNOX-2899 followup - reenable service based discovery filter - posted by "Tamás Marcinkovics (Jira)" <ji...@apache.org> on 2026/09/09 13:31:00 UTC, 1 replies.
- [jira] [Assigned] (KNOX-2900) KNOX-2899 followup - reenable service based discovery filter - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/09/09 14:39:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3421) Upgrade Shiro to 2.2.1 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/09 15:06:00 UTC, 0 replies.
- Re: [PR] KNOX-3402: gRPC gateway support (aimed at Spark Connect but generically useful) [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/09 19:55:08 UTC, 0 replies.
- [jira] [Work logged] (KNOX-3402) gRPC gateway support - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/09 19:56:00 UTC, 0 replies.
- Re: [PR] KNOX-3443: add unit test coverage for MimeTypes [knox] - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/09 22:45:51 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3443) Add unit test coverage for MimeTypes - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/09 22:46:00 UTC, 2 replies.
- [jira] [Created] (KNOX-3446) Update NOTICE, LICENCE, CHANGES and version for 3.1.0 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/10 07:11:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1674) Remove nimbus-jose-jwt allowWeakKey - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3106) Document the RemoteAuthProvider with examples - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3142) Add support for client credentials flow to use HTTP Basic - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2374) Compress rolled logs and delete logs files that older - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2681) Document property to trim out groups, permissions and roles for hadoop-jwt cookie - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1749) Improve Docker integration - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2874) Typos in JDBC token state service config docs - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1741) KnoxSSO to Support IDP Initiated Flow - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1339) Support for cloud federation - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2644) Topology names should be validated when uploaded via API - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2019) Documentation update for new config 'gateway.websocket.max.wait.buffer.count' in gateway-site.xml - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1609) Remove Livy /v1/ from service definition - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1204) KIP-11 - S3 Access through Knox API - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3166) Replace Github Page with Community Page and include Github There - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1865) Admin UI Provider Config Forms need Tooltips/Help Text - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2409) HS2 Interactive Active/Passive HA not working - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2309) Use GatewayTestDriver in functional tests - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2349) knoxcli convert-topology descriptor-name is not optional - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2842) ARM64 build support in GitHub actions - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3027) CM discovery cache improvements - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1991) Rewrite websocket data - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1644) Improve HDFSUI 3.0.0 version to handle no ?host= parameter - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2362) Extend KnoxShell Commands to publish KnoxShellTable to JDBC Data Source - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1653) Atlas dispatches - Add tests and reduce duplication - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2643) TopologyService should validate descriptor and provider config file paths - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1380) Create an Admin API to return a topology status - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-2361) Fix SQL History in KnoxShell knoxline - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3143) Add authorization related metadata to the issuance of CLIENT_ID and CLIENT_SECRET - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3268) Add {username} variable for Dynamic Path Based ACLs - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3163) Client/User Guide Discovering Resources Page - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-899) Trailing slashes when proxying UIs causes issues - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1425) UI Changes to include dispatch element in topology - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1432) Knox directories should not be world readable (conf, logs, data etc.) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3160) MkDocs Docathon Epic - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-1423) Document Zookeeper URL Manager behaviour for HA services - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-929) Identity Broker API - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3281) DefaultTokenAuthorityService only supports RSA keys, fails with EC-based signing keys - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2688) Perf test - Knox does not honour token limit per user - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2845) GatewayAdminTopologyFuncTest#testPutTopology failing - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1852) Simplify ZookeeperRemoteAliasService and make it generic - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3164) Move General Troubleshooting Section from Client/User Guide to Admin Guide - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2509) Use Open API UI to browse the Knox Admin/Metadata API REST endpoints - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1355) Knox not honoring originalUrl when pac4j federation is used - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3141) Add /.well-known/openid-configuration to OAUTH Service - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1785) Inject tag to simplify rewrite rules - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1729) Add support for proxying Grafana - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3165) Broken Links from W3C Link Checker - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3267) Add optional credential storing to KNOXTOKEN, CLIENTID and APIKEY Services - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2264) Docker - move from docker-maven-plugin to dockerfile-maven - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1652) Move Atlas dispatches to their own module - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1299) Admin API does not serialize older deployed topology file with identity-assertion provider - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3241) Introduce retry/failover in Remote Auth filter - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1706) Look at using WebJars for knoxauth application - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2297) NPE during Shiro cleanup? - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-799) Rewrite rules for handling of trailing slash '/' - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1860) Need redirect to login when SSO cookie expires - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1873) Add HiveServer2 UI proxy support - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1790) Docker - Handle custom Knox master secret - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2096) Create new column from existing columns - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3144) Move Documentation Site into the Source Tree - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2580) Adding a token in TokenStateService should work with token metadata - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3149) Add Shell Client Classes for the Knox Metadata API - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2364) Extend KnoxShell Filesystem Command to be able to put Strings as Files - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2528) Tracking URL link in YARN for Killed applications broken - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1725) gateway.custom.federation.header.name property should be at a dispatch level - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2358) Reload the Knox Home page upon topology changes - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1953) Figure out how to publish Knox Docker image - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1704) Upgrade to JUnit 5 - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-3161) Revisit the Hadoop centric Quickstart Guide to be more Modern - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1614) Improve error propagation for topology deployments - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2838) Document KNOX-2726 - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2828) Token generation maximum token ttl unlimited not working when lifespan input is disabled - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2897) Eliminate or minimize the need for replayBufferSize configuration - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1591) Remove NODEUI service since it doesn't work in current state - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-2363) Fix KnoxShellTable Call History across the various Builders - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Updated] (KNOX-1675) Migrate to URLEncodingUtils from HttpUtils - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:14:01 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3393) jetty 9 is not maintained and has unfixed CVEs - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 07:18:00 UTC, 0 replies.
- [VOTE] Release Apache Knox 2.1.1 - RC2 - posted by Tamás Hanicz <ha...@gmail.com> on 2026/09/10 08:21:48 UTC, 4 replies.
- [PR] KNOX-3446: Change version to 3.1.0, Update NOTICE and CHANGES [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/10 08:42:56 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3446) Update NOTICE, CHANGES and version for 3.1.0 - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/10 08:43:00 UTC, 2 replies.
- [jira] [Updated] (KNOX-3446) Update NOTICE, CHANGES and version for 3.1.0 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/10 08:43:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/10 09:28:00 UTC, 0 replies.
- [PR] KNOX-3447: Harden ServiceDefinitonUnmarshaller [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/10 11:31:50 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/10 11:32:00 UTC, 2 replies.
- [PR] Knox 3238 [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/10 11:43:31 UTC, 0 replies.
- Re: [PR] KNOX-3238: Migrate from javax.servlet to jakarta.servlet servlet-api [knox] - posted by "github-actions[bot] (via GitHub)" <gi...@apache.org> on 2026/09/10 12:21:26 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3238) Migrate from javax.servlet to jakarta.servlet servlet-api - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/10 12:22:00 UTC, 7 replies.
- [jira] [Created] (KNOX-3448) add cn=admin for admin user in users.ldif - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/10 12:48:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/10 13:04:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 13:08:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 13:11:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/10 13:13:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/09/10 13:14:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/09/10 13:27:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/10 13:38:00 UTC, 1 replies.
- [jira] [Resolved] (KNOX-3447) Harden ServiceDefinitionUnmarshaller - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/10 13:38:00 UTC, 0 replies.
- [PR] KNOX-3450: Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch [knox] - posted by "pzampino (via GitHub)" <gi...@apache.org> on 2026/09/10 15:13:35 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/10 15:14:00 UTC, 2 replies.
- [jira] [Created] (KNOX-3451) Add unit tests for XForwardedHeaderRequestWrapper - posted by "Raghav Maheshwari (Jira)" <ji...@apache.org> on 2026/09/10 17:40:00 UTC, 0 replies.
- [PR] KNOX-3451: Add unit tests for XForwardedHeaderRequestWrapper [knox] - posted by "shreyaaryaofficial (via GitHub)" <gi...@apache.org> on 2026/09/10 17:55:27 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3451) Add unit tests for XForwardedHeaderRequestWrapper - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/10 17:56:00 UTC, 1 replies.
- [PR] KNOX-3410: Add unit tests for XForwardedHeaderRequestWrapper [knox] - posted by "shreyaaryaofficial (via GitHub)" <gi...@apache.org> on 2026/09/10 17:59:04 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3410) Improve KnoxToken enable/disable methods - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/10 18:00:00 UTC, 3 replies.
- [jira] [Commented] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/10 18:32:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3450) Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch - posted by "Philip Zampino (Jira)" <ji...@apache.org> on 2026/09/10 19:42:00 UTC, 0 replies.
- [PR] KNOX-3444: Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use [knox] - posted by "bonampak (via GitHub)" <gi...@apache.org> on 2026/09/11 07:19:48 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/11 07:20:00 UTC, 2 replies.
- [jira] [Created] (KNOX-3452) Add comprehensive unit tests for MimeTypes - posted by "Raghav Maheshwari (Jira)" <ji...@apache.org> on 2026/09/11 08:09:00 UTC, 0 replies.
- [PR] KNOX-3452: Add comprehensive unit tests for MimeTypes [knox] - posted by "Raghav-Mah3shwari (via GitHub)" <gi...@apache.org> on 2026/09/11 08:15:55 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3452) Add comprehensive unit tests for MimeTypes - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/11 08:16:00 UTC, 7 replies.
- [jira] [Commented] (KNOX-3444) Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/11 11:50:00 UTC, 0 replies.
- [PR] Knox 3445 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/11 11:57:13 UTC, 1 replies.
- [PR] KNOX-2900: KNOX-2899 followup - reenable service based discovery filter [knox] - posted by "bonampak (via GitHub)" <gi...@apache.org> on 2026/09/11 14:34:29 UTC, 2 replies.
- [jira] [Work logged] (KNOX-2900) KNOX-2899 followup - reenable service based discovery filter - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/11 14:35:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3410) Improve KnoxToken enable/disable methods - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/14 07:05:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3446) Update NOTICE, CHANGES and version for 3.1.0 - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/14 07:13:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3446) Update NOTICE, CHANGES and version for 3.1.0 - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/14 07:14:00 UTC, 0 replies.
- [PR] KNOX-3449: Prove Knox accepts Kubernetes ServiceAccount tokens on the RFC 8693 token-exchange path [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/14 07:25:44 UTC, 4 replies.
- [jira] [Work logged] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/14 07:26:00 UTC, 4 replies.
- Re: [PR] KNOX-3445: KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/14 07:38:28 UTC, 0 replies.
- [jira] [Work logged] (KNOX-3445) KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/14 07:39:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3445) KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/14 07:39:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3443) Add unit test coverage for MimeTypes - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/14 09:09:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/14 10:54:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3449) k8s delegation E2E: CI harness + same-subject exchange, TrustedOIDCIssuers admin API, and negative-path coverage - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/14 10:54:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/14 11:04:00 UTC, 0 replies.
- [PR] KNOX-3453: Ignore runtime-generated gateway-server/data/security directory in git [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/14 11:22:38 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/14 11:23:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/14 11:47:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3453) Ignore runtime-generated gateway-server/data/security directory in git - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/14 11:50:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3454) Add integration-test coverage that exercises the ClientCert authentication provider (X.509 principal extraction) behind inbound mTLS - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 07:46:00 UTC, 0 replies.
- [PR] KNOX-3441 - Add delegated token exchange (actor-token and headless) with policy enforcement and audit [knox] - posted by "hsheinblatt (via GitHub)" <gi...@apache.org> on 2026/09/15 09:11:08 UTC, 4 replies.
- [jira] [Work logged] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/15 09:12:00 UTC, 4 replies.
- [jira] [Created] (KNOX-3455) CI Gate - Same-Subject Token Exchange End-to-End Tests Pass in Default CI Run - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 09:23:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 11:51:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 11:53:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 11:56:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 12:03:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3460) Audit all token-exchange flows including minted token fields - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 12:06:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/15 12:08:00 UTC, 0 replies.
- [PR] KNOX-3457: Remove unused delegation.requested.scope.enabled provider parameter [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/15 12:16:32 UTC, 5 replies.
- [jira] [Work logged] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/15 12:17:00 UTC, 5 replies.
- [PR] KNOX-3458: enforce a configurable maximum actor-chain depth in token exchange [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/15 12:46:38 UTC, 6 replies.
- [jira] [Work logged] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/15 12:47:00 UTC, 6 replies.
- [PR] KNOX-3459: honor delegation policy tokenTtlSec as the minted token's expiry basis [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/15 13:10:40 UTC, 5 replies.
- [jira] [Work logged] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/15 13:11:00 UTC, 5 replies.
- [PR] KNOX-3456: resolve canActFor.groups via KnoxLDAPService group lookup, failing with server_error when LDAP is unavailable [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/15 15:05:24 UTC, 5 replies.
- [jira] [Work logged] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/15 15:06:00 UTC, 5 replies.
- [jira] [Commented] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/15 16:16:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3457) Remove unused delegation.requested.scope.enabled provider parameter - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/15 16:17:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3461) Same subject validation for requested audience - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/16 00:23:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/16 00:32:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/16 07:08:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3462) Fix github docs links - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/16 07:17:00 UTC, 0 replies.
- [PR] KNOX-3462: Fix github docs links [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/16 07:23:34 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3462) Fix github docs links - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/16 07:24:00 UTC, 2 replies.
- [jira] [Resolved] (KNOX-3462) Fix github docs links - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/16 07:49:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3462) Fix github docs links - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/16 07:49:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3456) Enforce canActFor.groups in delegation policy via Knox LDAP group lookup - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 07:57:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/16 08:01:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3461) Same subject validation for requested audience - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 08:11:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3459) Honor delegation policy tokenTtlSec override when minting exchanged tokens - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 08:11:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3458) Enforce a maximum actor-chain (act claim) depth in token exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 08:12:00 UTC, 1 replies.
- [jira] [Work started] (KNOX-3461) Same subject validation for requested audience - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 09:11:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-2967) Invalid characters in Knox SSO section of dev guide - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/16 10:12:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-2874) Typos in JDBC token state service config docs - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/16 10:12:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3463) Backport v3.0.0 docs changes to master - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/16 10:50:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3464) Document delegation policy and trusted OIDC features in KnoxIDF - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 10:56:00 UTC, 0 replies.
- [PR] Backport v3.0.0 docs changes to master and changing version to 3.1.0 [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/16 10:59:29 UTC, 2 replies.
- [PR] KNOX-3461: authorize same-subject requested audience against the subject token's aud via delegation.same.subject.requested.audience.enabled [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/16 11:03:19 UTC, 11 replies.
- [jira] [Work logged] (KNOX-3461) Same subject validation for requested audience - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/16 11:04:00 UTC, 11 replies.
- [jira] [Updated] (KNOX-3461) Same subject validation for requested audience - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 11:05:00 UTC, 1 replies.
- [jira] [Resolved] (KNOX-3463) Backport v3.0.0 docs changes to master - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/16 11:18:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3463) Backport v3.0.0 docs changes to master - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/16 11:18:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3455) CI Gate - Same-Subject Token Exchange End-to-End Tests Pass in Default CI Run - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 11:23:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3465) Add Docker-based E2E CI tests for RFC 8693 token exchange — same-subject success and delegation gating (KNOX-3455 Bucket 1) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 11:23:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3466) Add Docker-based E2E CI tests for same-subject requested-audience authorization in token exchange (KNOX-3455 Bucket 2, depends on KNOX-3461) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 11:26:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3467) mplement and E2E-test requested-scope authorization for token exchange (KNOX-3455 Bucket 3, blocked — no product support yet) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 11:29:00 UTC, 0 replies.
- [PR] KNOX-3465: add CI integration tests for RFC 8693 token exchange (same-subject and delegation gating) [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/16 12:25:28 UTC, 3 replies.
- [jira] [Updated] (KNOX-3465) Add Docker-based E2E CI tests for RFC 8693 token exchange — same-subject success and delegation gating (KNOX-3455 Bucket 1) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/16 12:26:00 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3465) Add Docker-based E2E CI tests for RFC 8693 token exchange — same-subject success and delegation gating (KNOX-3455 Bucket 1) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/16 12:26:00 UTC, 3 replies.
- [jira] [Commented] (KNOX-3238) Migrate from javax.servlet to jakarta.servlet servlet-api - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/16 12:41:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3465) Add Docker-based E2E CI tests for RFC 8693 token exchange — same-subject success and delegation gating (KNOX-3455 Bucket 1) - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/16 13:18:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3468) Webshell missing libutil.so - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/16 14:02:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3468) Webshell missing libutil.so - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/16 14:02:00 UTC, 0 replies.
- [PR] KNOX-3466: add CI integration tests for RFC 8693 same-subject requested-audience authorization [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/16 15:12:28 UTC, 6 replies.
- [jira] [Work logged] (KNOX-3466) Add Docker-based E2E CI tests for same-subject requested-audience authorization in token exchange (KNOX-3455 Bucket 2, depends on KNOX-3461) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/16 15:13:00 UTC, 6 replies.
- [jira] [Created] (KNOX-3469) Remove redundant org.glassfish:jakarta.json dependency in favor of Eclipse Parsson - posted by "Tamás Marcinkovics (Jira)" <ji...@apache.org> on 2026/09/16 16:05:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3469) Remove redundant org.glassfish:jakarta.json dependency - posted by "Tamás Marcinkovics (Jira)" <ji...@apache.org> on 2026/09/16 16:12:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3470) Add support for /.well-known/oauth-authorization-server - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/16 17:26:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3471) KnoxIDF expires_in should return relative second instead of absolute epoch-ms - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/17 08:45:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3461) Same subject validation for requested audience - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/17 08:46:01 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3238) Migrate from javax.servlet to jakarta.servlet servlet-api - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/17 09:09:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3466) Add Docker-based E2E CI tests for same-subject requested-audience authorization in token exchange (KNOX-3455 Bucket 2, depends on KNOX-3461) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/17 09:10:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3466) Add Docker-based E2E CI tests for same-subject requested-audience authorization in token exchange (KNOX-3455 Bucket 2, depends on KNOX-3461) - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/17 09:48:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3460) Audit all token-exchange flows including minted token fields - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/17 10:19:00 UTC, 0 replies.
- [PR] KNOX-3471: KnoxIDF expires_in should return relative second instead o… [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/17 10:39:23 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3471) KnoxIDF expires_in should return relative second instead of absolute epoch-ms - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/17 10:40:00 UTC, 2 replies.
- [PR] KNOX-3460: audit all RFC 8693 token-exchange paths pre-mint and add a mint-time TOKEN_EXCHANGE audit emitting jti/expiry/issued_subject [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/17 12:14:24 UTC, 6 replies.
- [jira] [Work logged] (KNOX-3460) Audit all token-exchange flows including minted token fields - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/17 12:15:00 UTC, 6 replies.
- [jira] [Resolved] (KNOX-3471) KnoxIDF expires_in should return relative second instead of absolute epoch-ms - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/17 12:37:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3471) KnoxIDF expires_in should return relative second instead of absolute epoch-ms - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/17 12:37:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3472) Add Knox service definition for Livy for Spark 3 (livy_for_spark3) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 14:22:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3473) Add Knox service definition for Livy for Spark 4 (livy_for_spark4) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 14:23:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3474) Add Knox service definition for Spark 4 History Server UI (spark4historyui) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 14:24:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3472) Add Knox service definition for Livy for Spark 3 (livy_for_spark3) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 14:41:00 UTC, 5 replies.
- [jira] [Updated] (KNOX-3473) Add Knox service definition for Livy for Spark 4 (livy_for_spark4) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 14:48:00 UTC, 1 replies.
- [jira] [Updated] (KNOX-3474) Add Knox service definition for Spark 4 History Server UI (spark4historyui) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 15:08:00 UTC, 3 replies.
- [PR] KNOX-3464: document KnoxIDF RFC 8693 token exchange & delegation; fix KnoxIDF config reference [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/17 15:43:42 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3464) Document delegation policy and trusted OIDC features in KnoxIDF - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/17 15:44:00 UTC, 7 replies.
- [PR] KNOX-3472: Add livy_for_spark3 Knox service definition [knox] - posted by "samuhasavak5 (via GitHub)" <gi...@apache.org> on 2026/09/17 18:36:12 UTC, 4 replies.
- [jira] [Work logged] (KNOX-3472) Add Knox service definition for Livy for Spark 3 (livy_for_spark3) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/17 18:37:00 UTC, 4 replies.
- [PR] KNOX-3473: Add livy_for_spark4 Knox service definition [knox] - posted by "samuhasavak5 (via GitHub)" <gi...@apache.org> on 2026/09/17 19:03:48 UTC, 9 replies.
- [jira] [Work logged] (KNOX-3473) Add Knox service definition for Livy for Spark 4 (livy_for_spark4) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/17 19:04:00 UTC, 9 replies.
- [PR] KNOX-3474: Add spark4historyui Knox service definition [knox] - posted by "samuhasavak5 (via GitHub)" <gi...@apache.org> on 2026/09/17 19:29:23 UTC, 9 replies.
- [jira] [Work logged] (KNOX-3474) Add Knox service definition for Spark 4 History Server UI (spark4historyui) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/17 19:30:00 UTC, 9 replies.
- [jira] [Commented] (KNOX-3472) Add Knox service definition for Livy for Spark 3 (livy_for_spark3) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 19:34:00 UTC, 1 replies.
- [jira] [Comment Edited] (KNOX-3472) Add Knox service definition for Livy for Spark 3 (livy_for_spark3) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 19:37:00 UTC, 4 replies.
- [jira] [Commented] (KNOX-3473) Add Knox service definition for Livy for Spark 4 (livy_for_spark4) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 19:39:00 UTC, 2 replies.
- [jira] [Comment Edited] (KNOX-3473) Add Knox service definition for Livy for Spark 4 (livy_for_spark4) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 19:40:00 UTC, 5 replies.
- [jira] [Commented] (KNOX-3474) Add Knox service definition for Spark 4 History Server UI (spark4historyui) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 19:42:00 UTC, 1 replies.
- [jira] [Comment Edited] (KNOX-3474) Add Knox service definition for Spark 4 History Server UI (spark4historyui) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/17 19:43:00 UTC, 2 replies.
- [jira] [Created] (KNOX-3475) Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must check status - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/17 20:54:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3464) Document delegation policy and trusted OIDC features in KnoxIDF - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/18 07:04:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3464) Document delegation policy and trusted OIDC features in KnoxIDF - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 07:05:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3467) Implement and E2E-test requested-scope authorization for token exchange (KNOX-3455 Bucket 3, blocked — no product support yet) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 07:17:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3460) Audit all token-exchange flows including minted token fields - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/18 08:58:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3460) Audit all token-exchange flows including minted token fields - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 08:58:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3475) Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must check status - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 08:59:00 UTC, 0 replies.
- [jira] [Assigned] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 09:01:00 UTC, 2 replies.
- [jira] [Work started] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 09:02:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3476) CI Gate - Cross-Subject Delegation Exchange with Policy Enforcement Tests Pass in CI - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 09:32:00 UTC, 0 replies.
- [PR] KNOX-3475: enforce delegation policy status at authorization time so a revoked (not deleted) policy no longer authorizes token exchange [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/18 10:55:04 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3475) Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must check status - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/18 10:56:00 UTC, 3 replies.
- [jira] [Updated] (KNOX-3475) Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must check status - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 10:56:00 UTC, 1 replies.
- [PR] KNOX-3469: Remove redundant org.glassfish:jakarta.json dependency [knox] - posted by "bonampak (via GitHub)" <gi...@apache.org> on 2026/09/18 12:37:53 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3469) Remove redundant org.glassfish:jakarta.json dependency - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/18 12:52:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3475) Delegation policy enforcement in JdbcDelegationPolicyService.evaluate() must check status - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/18 13:51:00 UTC, 0 replies.
- [PR] KNOX-3476: add RFC 8693 delegation-path integration tests (policy lookup, act/aud minting, TTL cap, headless) [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/18 14:01:36 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3476) CI Gate - Cross-Subject Delegation Exchange with Policy Enforcement Tests Pass in CI - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/18 14:02:00 UTC, 2 replies.
- [jira] [Resolved] (KNOX-3441) Delegation policy enforcement in token RFC 8693 token exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 15:05:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3476) CI Gate - Cross-Subject Delegation Exchange with Policy Enforcement Tests Pass in CI - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/18 15:06:00 UTC, 1 replies.
- [PR] KNOX-3470 - Add support for /.well-known/oauth-authorization-server [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/09/18 20:21:52 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3470) Add support for /.well-known/oauth-authorization-server - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/18 20:22:00 UTC, 3 replies.
- [jira] [Commented] (KNOX-3470) Add support for /.well-known/oauth-authorization-server - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/18 21:14:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3470) Add support for /.well-known/oauth-authorization-server - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/18 21:17:00 UTC, 0 replies.
- [PR] Bump org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85 [knox] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/19 04:27:41 UTC, 1 replies.
- [jira] [Commented] (KNOX-3476) CI Gate - Cross-Subject Delegation Exchange with Policy Enforcement Tests Pass in CI - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/19 06:52:00 UTC, 0 replies.
- [VOTE] Release Apache Knox 2.1.1 - RC3 - posted by Tamás Hanicz <ha...@gmail.com> on 2026/09/21 07:01:36 UTC, 1 replies.
- [jira] [Created] (KNOX-3477) Capture the RFC 8693 delegation actor-chain in gateway-audit.log - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/21 08:29:00 UTC, 0 replies.
- [PR] KNOX-3477: Capture the RFC 8693 delegation actor-chain in gateway-aud… [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/21 10:49:48 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3477) Capture the RFC 8693 delegation actor-chain in gateway-audit.log - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/21 10:50:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3477) Capture the RFC 8693 delegation actor-chain in gateway-audit.log - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/21 11:40:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3477) Capture the RFC 8693 delegation actor-chain in gateway-audit.log - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/21 11:40:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3473) Add Knox service definition for Livy for Spark 4 (livy_for_spark4) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/21 12:19:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3472) Add Knox service definition for Livy for Spark 3 (livy_for_spark3) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/21 12:20:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3474) Add Knox service definition for Spark 4 History Server UI (spark4historyui) - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/21 12:20:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3478) Extend auth service API to pass JWT token as header downstream - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/21 20:20:00 UTC, 0 replies.
- [PR] Add per-instance HA routing for livy_for_spark3 [knox] - posted by "samuhasavak5 (via GitHub)" <gi...@apache.org> on 2026/09/22 15:18:40 UTC, 0 replies.
- [jira] [Created] (KNOX-3479) Add per-instance HA routing for Livy for Spark 3 (livy_for_spark3) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/22 15:46:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3479) Add per-instance HA routing for Livy for Spark 3 (livy_for_spark3) - posted by "Arun Kumar M (Jira)" <ji...@apache.org> on 2026/09/22 15:47:00 UTC, 1 replies.
- Re: [PR] KNOX-3479: Add per-instance HA routing for livy_for_spark3 [knox] - posted by "samuhasavak5 (via GitHub)" <gi...@apache.org> on 2026/09/22 16:15:33 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3479) Add per-instance HA routing for Livy for Spark 3 (livy_for_spark3) - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/22 16:16:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3281) DefaultTokenAuthorityService only supports RSA keys, fails with EC-based signing keys - posted by "arun kumar (Jira)" <ji...@apache.org> on 2026/09/22 17:22:00 UTC, 0 replies.
- [PR] KNOX-3281: Support EC signing keys in DefaultTokenAuthorityService [knox] - posted by "arunk-kumar (via GitHub)" <gi...@apache.org> on 2026/09/22 17:26:52 UTC, 0 replies.
- [jira] [Work logged] (KNOX-3281) DefaultTokenAuthorityService only supports RSA keys, fails with EC-based signing keys - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/22 17:27:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3480) Support user-supplied clientId in the Client Credentials endpoint - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/23 07:06:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3452) Add comprehensive unit tests for MimeTypes - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/23 07:27:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3452) Add comprehensive unit tests for MimeTypes - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/23 07:27:00 UTC, 0 replies.
- [PR] KNOX-3480: Support user-supplied clientId in the Client Credentials endpoint [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/23 08:20:52 UTC, 8 replies.
- [jira] [Work logged] (KNOX-3480) Support user-supplied clientId in the Client Credentials endpoint - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/23 08:21:00 UTC, 8 replies.
- [jira] [Created] (KNOX-3481) Fix token concurrency issues - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/23 11:48:00 UTC, 0 replies.
- [VOTE] Release Apache Knox 2.1.1 - RC4 - posted by Tamás Hanicz <ha...@gmail.com> on 2026/09/23 15:33:55 UTC, 4 replies.
- [jira] [Commented] (KNOX-3480) Support user-supplied clientId in the Client Credentials endpoint - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/23 16:03:00 UTC, 0 replies.
- [PR] Bump org.jline:jline-builtins from 3.30.6 to 3.30.15 [knox] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 18:35:28 UTC, 1 replies.
- [PR] Bump org.jline:jline-reader from 3.30.6 to 3.30.15 [knox] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 18:35:38 UTC, 1 replies.
- [PR] KNOX-3478 - Add support to forward auth tokens in KNOX-AUTH-SERVICE [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/09/23 20:18:17 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3478) Extend auth service API to pass JWT token as header downstream - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/23 20:19:00 UTC, 7 replies.
- [jira] [Created] (KNOX-3482) Expand Knox health endpoint integration coverage - posted by "Raghav Maheshwari (Jira)" <ji...@apache.org> on 2026/09/24 06:15:00 UTC, 0 replies.
- [PR] KNOX-3482: Expand Knox health endpoint integration coverage [knox] - posted by "Raghav-Mah3shwari (via GitHub)" <gi...@apache.org> on 2026/09/24 06:27:27 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3482) Expand Knox health endpoint integration coverage - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/24 06:28:00 UTC, 3 replies.
- [jira] [Created] (KNOX-3483) HadoopAuthPostFilter does not capture the caller JWT as an AuthTokenCredential, so KNOX-AUTH-SERVICE token forwarding no-ops on HadoopAuth topologies - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/24 12:38:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3483) HadoopAuthPostFilter does not capture the caller JWT as an AuthTokenCredential, so KNOX-AUTH-SERVICE token forwarding no-ops on HadoopAuth topologies - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/24 13:20:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3478) Extend auth service API to pass JWT token as header downstream - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/24 13:22:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3478) Extend auth service API to pass JWT token as header downstream - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/24 13:27:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3484) Use Apache Commons Secure XML for all JAXP factories - posted by "Piotr Karwasz (Jira)" <ji...@apache.org> on 2026/09/24 18:31:00 UTC, 0 replies.
- [PR] KNOX-3484 - Use Apache Commons Secure XML for all JAXP factories [knox] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/09/24 21:22:41 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3484) Use Apache Commons Secure XML for all JAXP factories - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/24 21:23:00 UTC, 3 replies.
- [jira] [Created] (KNOX-3485) LDAP Proxy should apply role mapping to Group entries - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/25 02:16:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3486) LDAP Proxy role lookup should return all roles on wildcard search - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/25 02:17:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3487) LDAP Proxy find all members of a role - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/25 02:24:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3485) LDAP Proxy should apply role mapping to Group entries - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/25 02:24:00 UTC, 0 replies.
- [PR] KNOX-3485: Roles lookup replaces group entries with role entries [knox] - posted by "handavid (via GitHub)" <gi...@apache.org> on 2026/09/25 03:02:15 UTC, 5 replies.
- [jira] [Work logged] (KNOX-3485) LDAP Proxy should apply role mapping to Group entries - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/25 03:03:00 UTC, 5 replies.
- [jira] [Created] (KNOX-3488) Harden original_url cookie validation - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/25 06:23:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3488) Harden original-url cookie validation - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/25 06:42:00 UTC, 0 replies.
- [PR] KNOX-3488: Harden original-url validation [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/25 06:55:47 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3488) Harden original-url cookie validation - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/25 07:09:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3489) Add logging arounf REST-based LDAP roles lookup - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/25 11:20:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3489) Add logging arounf REST-based LDAP roles lookup - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/25 11:20:00 UTC, 0 replies.
- [PR] KNOX-3489: Log request/response when calling remote role lookup server [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/25 12:18:55 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3489) Add logging arounf REST-based LDAP roles lookup - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/25 12:19:00 UTC, 3 replies.
- [jira] [Created] (KNOX-3490) LDAPRolesLookupInterceptor resolves the wrong username when the LDAP client does not request the uid attribute, causing incorrect role lookups - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/25 15:37:00 UTC, 0 replies.
- [PR] KNOX-3490: Key LDAP roles lookup on uid from the entry DN so it is not lost when the client omits the uid attribute [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/25 15:41:47 UTC, 4 replies.
- [jira] [Work logged] (KNOX-3490) LDAPRolesLookupInterceptor resolves the wrong username when the LDAP client does not request the uid attribute, causing incorrect role lookups - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/25 15:42:00 UTC, 5 replies.
- [jira] [Commented] (KNOX-3489) Add logging arounf REST-based LDAP roles lookup - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/25 18:34:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3491) Allow JWT aud validation against request header values and include an initial delegation token only validator - posted by "Harrison Sheinblatt (Jira)" <ji...@apache.org> on 2026/09/26 21:27:00 UTC, 0 replies.
- [PR] KNOX-3491 - Add pluggable request audience validation, with a Kubernetes destination validator [knox] - posted by "hsheinblatt (via GitHub)" <gi...@apache.org> on 2026/09/26 21:30:31 UTC, 7 replies.
- [jira] [Work logged] (KNOX-3491) Allow JWT aud validation against request header values and include an initial delegation token only validator - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/26 21:31:00 UTC, 7 replies.
- Re: [PR] KNOX-3490: Key LDAP roles lookup on the uid attribute, augmenting the backend search with it when the client omits it [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/28 14:48:14 UTC, 0 replies.
- [jira] [Commented] (KNOX-3490) LDAPRolesLookupInterceptor resolves the wrong username when the LDAP client does not request the uid attribute, causing incorrect role lookups - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/28 14:49:00 UTC, 0 replies.
- [RESULT][VOTE] Release Apache Knox 2.1.1 - RC 4 - posted by Tamás Hanicz <ha...@gmail.com> on 2026/09/28 18:58:33 UTC, 0 replies.
- [jira] [Created] (KNOX-3492) Update CHANGES with 2.1.1 release - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/29 07:26:00 UTC, 0 replies.
- [PR] KNOX-3492: Update CHANGES with 2.1.1 release [knox] - posted by "hanicz (via GitHub)" <gi...@apache.org> on 2026/09/29 07:26:46 UTC, 2 replies.
- [jira] [Work logged] (KNOX-3492) Update CHANGES with 2.1.1 release - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/29 07:27:00 UTC, 2 replies.
- [jira] [Commented] (KNOX-3492) Update CHANGES with 2.1.1 release - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/29 08:31:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3492) Update CHANGES with 2.1.1 release - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/29 08:31:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3489) Add logging arounf REST-based LDAP roles lookup - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/29 10:18:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3493) k8s delegation E2E: policy-enforced SA actor-token delegation and headless SA-subject requested_subject exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/29 10:26:00 UTC, 0 replies.
- [jira] [Work started] (KNOX-3493) k8s delegation E2E: policy-enforced SA actor-token delegation and headless SA-subject requested_subject exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/29 10:27:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3493) k8s delegation E2E: policy-enforced SA actor-token delegation and headless SA-subject requested_subject exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/29 10:28:00 UTC, 1 replies.
- [jira] [Created] (KNOX-3494) Unify tokenstate and KnoxIDF impl selection - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/29 11:25:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3495) DB remote configuration monitor fails on Oracle with ORA-00904 on 21c and 19c - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/29 11:26:00 UTC, 0 replies.
- [PR] KNOX-3493: Add k8s SA policy-enforced actor-token and headless requested_subject delegation E2E tests [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/29 12:10:33 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3493) k8s delegation E2E: policy-enforced SA actor-token delegation and headless SA-subject requested_subject exchange - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/29 12:11:00 UTC, 3 replies.
- [jira] [Resolved] (KNOX-3493) k8s delegation E2E: policy-enforced SA actor-token delegation and headless SA-subject requested_subject exchange - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/29 18:03:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3493) k8s delegation E2E: policy-enforced SA actor-token delegation and headless SA-subject requested_subject exchange - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/29 18:03:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3491) Allow JWT aud validation against request header values and include an initial delegation token only validator - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/29 18:53:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3496) LDAP Proxy memberOf optimization doesn't work if memberOf is an operational attribute - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/30 03:24:00 UTC, 0 replies.
- [PR] KNOX-3496: LDAP Proxy requests memberOf attribute from backend [knox] - posted by "handavid (via GitHub)" <gi...@apache.org> on 2026/09/30 03:32:12 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3496) LDAP Proxy memberOf optimization doesn't work if memberOf is an operational attribute - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/30 03:33:00 UTC, 3 replies.
- [jira] [Work started] (KNOX-3496) LDAP Proxy memberOf optimization doesn't work if memberOf is an operational attribute - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/30 03:33:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3485) LDAP Proxy should apply role mapping to Group entries - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/30 06:59:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3497) LdapProxyBackend does not resolve credential-store aliases for bind/system password - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/30 07:19:00 UTC, 0 replies.
- [jira] [Commented] (KNOX-3496) LDAP Proxy memberOf optimization doesn't work if memberOf is an operational attribute - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/30 09:05:00 UTC, 0 replies.
- [PR] KNOX-3497: Resolve credential-store aliases in LDAP proxy backend password properties [knox] - posted by "smolnar82 (via GitHub)" <gi...@apache.org> on 2026/09/30 09:11:18 UTC, 3 replies.
- [jira] [Work logged] (KNOX-3497) LdapProxyBackend does not resolve credential-store aliases for bind/system password - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/30 09:12:00 UTC, 3 replies.
- [jira] [Updated] (KNOX-3497) LdapProxyBackend does not resolve credential-store aliases for bind/system password - posted by "Sandor Molnar (Jira)" <ji...@apache.org> on 2026/09/30 09:13:00 UTC, 1 replies.
- [jira] [Commented] (KNOX-3497) LdapProxyBackend does not resolve credential-store aliases for bind/system password - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/09/30 09:33:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled. - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/30 11:33:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3499) Issuers named in `jwt.expected.issuer` never reach the trusted issuer registry - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/30 13:24:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3485) LDAP Proxy should apply role mapping to Group entries - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/30 13:34:00 UTC, 0 replies.
- [jira] [Resolved] (KNOX-3496) LDAP Proxy memberOf optimization doesn't work if memberOf is an operational attribute - posted by "David Han (Jira)" <ji...@apache.org> on 2026/09/30 13:34:00 UTC, 0 replies.
- [jira] [Created] (KNOX-3500) knoxcli creates a throwaway embedded H2 database, locking it to the wrong credentials - posted by "Tamás Hanicz (Jira)" <ji...@apache.org> on 2026/09/30 14:23:00 UTC, 0 replies.
- [jira] [Updated] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled. - posted by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/30 15:51:00 UTC, 0 replies.
- [PR] KNOX-3498 - In cases of failures with OIDC issuer discovery url containing IP addresses log a proper error and warn message. [knox] - posted by "moresandeep (via GitHub)" <gi...@apache.org> on 2026/09/30 17:24:18 UTC, 1 replies.
- [jira] [Work logged] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled. - posted by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/09/30 17:25:00 UTC, 1 replies.