[PR] feat: resolve authenticated runtime AdminClients by instance [rocketmq-dashboard]

["Aias00 (via GitHub)" <gi...@apache.org>]

Aias00 opened a new pull request, #1448:
URL: https://github.com/apache/rocketmq-dashboard/pull/1448

   ## Summary
   - add an optional Apache instance `adminCredentialRef`; instances, API responses, and audit records retain only this non-secret reference
   - resolve the selected instance's external Spring-configured AK/SK into an ACL 1.0 Remoting `RPCHook` before creating the runtime MQAdmin client
   - isolate the runtime client cache by normalized NameServer endpoint and credential reference, and release cached clients when an instance credential reference changes
   - add schema initialization and idempotent MySQL upgrade support for `admin_credential_ref`
   
   ## Configuration
   Configure credentials outside the database, for example through externalized Spring configuration or a Kubernetes Secret:
   ```yaml
   studio:
     cluster:
       admin:
         credentials:
           production-admin:
             access-key: ${STUDIO_PRODUCTION_ADMIN_ACCESS_KEY}
             secret-key: ${STUDIO_PRODUCTION_ADMIN_SECRET_KEY}
   ```
   
   The instance stores only `production-admin`; access and secret keys are never persisted or returned by instance APIs. A configured but missing/incomplete reference fails with HTTP 422 before a network call. Instances without a reference retain the existing unauthenticated behavior.
   
   ## Testing
   - `JAVA_HOME=$( /usr/libexec/java_home -v 21 ) mvn -Dtest=MqAdminExtFactoryTest,RuntimeAdminClientResolverTest,InstanceServiceTest test`
   - `npx vitest run src/pages/instance/__tests__/InstancePage.test.tsx --reporter=dot`
   - `npm run build`
   
   Closes #1430
   Part of #1312


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] feat: resolve authenticated runtime AdminClients by instance [rocketmq-dashboard]

["Aias00 (via GitHub)" <gi...@apache.org>]

Aias00 closed pull request #1448: feat: resolve authenticated runtime AdminClients by instance
URL: https://github.com/apache/rocketmq-dashboard/pull/1448


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] feat: resolve authenticated runtime AdminClients by instance [rocketmq-dashboard]

["Aias00 (via GitHub)" <gi...@apache.org>]

Aias00 commented on PR #1448:
URL: https://github.com/apache/rocketmq-dashboard/pull/1448#issuecomment-5237138663

   Superseded by #1454, which consolidates this implementation on the latest rocketmq-studio baseline.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org