You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by "yuluo-yx (via GitHub)" <gi...@apache.org> on 2026/09/04 15:14:19 UTC
[I] [Studio][Feature] Compare ACL policies across instances [rocketmq-dashboard]
yuluo-yx opened a new issue, #3136:
URL: https://github.com/apache/rocketmq-dashboard/issues/3136
## Problem
Operators maintain equivalent ACL users and rules across production, staging, and disaster-recovery RocketMQ instances. Studio currently exposes one instance at a time, so policy reviews require manual exports and carry a risk of overlooking a missing or divergent grant.
## Proposed behavior
Add a read-only ACL comparison workflow that:
- loads complete paginated user and rule inventories from two instances;
- classifies policies as matching, drifted, source-only, or target-only;
- compares user administration, cluster association, read, and write permissions;
- compares rule actions, decision, and ACL version under a stable principal/resource identity;
- preserves duplicate logical rules instead of collapsing them;
- supports kind/status/search filters and filtered CSV export.
## Sensitive-data boundary
The comparison must never call credential reveal endpoints. Secret keys, masked secrets, access-key display variants, database ids, and creation timestamps are excluded from comparisons and exports.
## Acceptance criteria
1. Inventory walks are bounded and include every page.
2. Source and target can be swapped without stale results.
3. User and rule drift has field-level evidence.
4. CSV export follows active filters and contains no secret material.
5. Chinese and English UI text and focused regression tests are included.
## Scope
This feature is observational and does not create, update, delete, or synchronize ACL policies.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Studio][Feature] Compare ACL policies across instances [rocketmq-dashboard]
Posted by "RockteMQ-AI (via GitHub)" <gi...@apache.org>.
RockteMQ-AI commented on issue #3136:
URL: https://github.com/apache/rocketmq-dashboard/issues/3136#issuecomment-5549857897
**Issue Evaluation**
Category: `type/enhancement` | Status: **Evaluated**
Well-motivated ACL comparison feature. Operators maintaining equivalent ACL policies across prod/staging/DR instances currently rely on manual exports and visual diff — error-prone and easy to miss divergent grants.
A structured side-by-side ACL diff view would reduce configuration drift risk. Fits the cross-instance comparison pattern (#3134, #3138).
---
*Automated evaluation by github-manager*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Studio][Feature] Compare ACL policies across instances [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #3136:
URL: https://github.com/apache/rocketmq-dashboard/issues/3136#issuecomment-6159455094
This issue has been automatically closed because there has been no activity for 7 days. If you believe this issue is still relevant, please reopen it with updated information.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Studio][Feature] Compare ACL policies across instances [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #3136: [Studio][Feature] Compare ACL policies across instances
URL: https://github.com/apache/rocketmq-dashboard/issues/3136
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org