[jira] [Comment Edited] (KNOX-1107) Remote Configuration Registry Client Service

["Phil Zampino (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KNOX-1107?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16253688#comment-16253688 ] 

Phil Zampino edited comment on KNOX-1107 at 11/15/17 4:01 PM:
--------------------------------------------------------------

The attached patch includes the remote registry client service and the default remote configuration monitor (i.e., KNOX-1010). The default monitor is included in this patch because it is not really a ZooKeeper-specific monitor any longer since it uses this new client service. The configuration of the client is what makes it ZooKeeper-specific. As such, I'm including it in this patch, and the tests include configuration that exercises the interactions with ZooKeeper.

I've attached some instructions for testing both unsecured and secured clients.

Note that ACL validation has not yet been implemented for this default config monitor. This will be addressed as a separate issue.


was (Author: pzampino):
The attached patch includes the remote registry client service and the default remote configuration monitor (i.e., KNOX-1010). The default monitor is included in this patch because it is not really a ZooKeeper-specific monitor any longer since it uses this new client service. The configuration of the client is what makes it ZooKeeper-specific. As such, I'm including it in this patch, and the tests include configuration that exercises the interactions with ZooKeeper.

I've attached some instructions for testing both unsecured and secured clients.

> Remote Configuration Registry Client Service
> --------------------------------------------
>
>                 Key: KNOX-1107
>                 URL: https://issues.apache.org/jira/browse/KNOX-1107
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 0.15.0
>            Reporter: Phil Zampino
>            Assignee: Phil Zampino
>              Labels: kip-8
>             Fix For: 0.15.0
>
>         Attachments: KNOX-1107.patch, testing-remote-zk-config-monitoring.txt, zkupload.sh
>
>
> There are currently multiple ZooKeeper clients in Knox, in the form of HA provider URL managers.
> These clients have been added to Knox independently, each without concern for the other. KNOX-1010 introduces yet another such client.
> In order to manage the configuration of these clients, it would be good to have a Client Service, from which these features can retrieve a ZooKeeper client.
> Furthermore, in the future, Knox may support additional configuration registries (e.g., consul, etcd), which these features may wish to employ. If this service is abstracted sufficiently, the underlying registry type can be a simple configuration change.
> In addition to managing security configuration for these clients, the service may also be able to enforce some ACL constraints on referenced znodes (or other registry entries) to mitigate the consumption of potentially untrusted configuration.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)