You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@kyuubi.apache.org by "Yutong-1424 (via GitHub)" <gi...@apache.org> on 2026/04/08 14:54:08 UTC
[PR] Improve session REST security [kyuubi]
Yutong-1424 opened a new pull request, #7391:
URL: https://github.com/apache/kyuubi/pull/7391
<!--
Thanks for sending a pull request!
Here are some tips for you:
1. If this is your first time, please read our contributor guidelines: https://kyuubi.readthedocs.io/en/master/contributing/code/index.html
2. If the PR is related to an issue in https://github.com/apache/kyuubi/issues, add '[KYUUBI #XXXX]' in your PR title, e.g., '[KYUUBI #XXXX] Your PR title ...'.
3. If the PR is unfinished, add '[WIP]' in your PR title, e.g., '[WIP][KYUUBI #XXXX] Your PR title ...'.
-->
### Why are the changes needed?
1. Sensitive settings in session APIs
Session APIs were returning full session configs as-is. Some keys (passwords, tokens, etc.) should not be shown to clients or in traces. This patch applies the same redaction pattern the server already uses elsewhere (SERVER_SECRET_REDACTION_PATTERN + Utils.redact) so list/detail responses don’t expose those values in plain text.
2. Over-broad session listing
GET /api/v1/sessions returned every session on the server. With auth turned on, it should only return sessions for the logged-in user, not everyone else’s
### How was this patch tested?
Added a REST test that opens a session with a sensitive Spark key, calls GET /api/v1/sessions, and checks the value is redacted.
Updated the session control CLI test so the session is opened with the same user the test client uses for auth, so the “list sessions” output matches real usage.
Verified tests run locally
### Was this patch authored or co-authored using generative AI tooling?
No
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3072795834
##########
kyuubi-server/src/main/scala/org/apache/kyuubi/server/api/ApiUtils.scala:
##########
@@ -22,13 +22,28 @@ import scala.collection.JavaConverters._
import org.apache.kyuubi.{Logging, Utils}
import org.apache.kyuubi.client.api.v1.dto
import org.apache.kyuubi.client.api.v1.dto.{OperationData, OperationProgress, ServerData, SessionData}
+import org.apache.kyuubi.config.KyuubiConf.{SERVER_SECRET_REDACTION_PATTERN, SESSION_CONF_DISPLAY_MODE}
import org.apache.kyuubi.ha.client.ServiceNodeInfo
import org.apache.kyuubi.operation.KyuubiOperation
import org.apache.kyuubi.session.KyuubiSession
object ApiUtils extends Logging {
+
+ private def buildConf(
+ rawConf: Map[String, String],
+ session: KyuubiSession): java.util.Map[String, String] = {
+ session.sessionManager.getConf.get(SESSION_CONF_DISPLAY_MODE) match {
+ case "NONE" => Map.empty[String, String].asJava
+ case "ORIGINAL" => rawConf.asJava
Review Comment:
use enum
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "Yutong-1424 (via GitHub)" <gi...@apache.org>.
Yutong-1424 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4209670890
> One concern on the user-based filtering for GET /api/v1/sessions — we already have GET /api/v1/admin/sessions in AdminResource with user filtering support, and BatchesResource doesn't enforce user filtering either, so this would be inconsistent. Also without authentication enabled, anyone can claim any identity, so the filtering provides no real security.
On auth, I agree that if auth isn’t on, you can’t really trust “current user,” so filtering isn’t a strong security fix by itself. The important part for everyone is redacting sensitive config in responses. When auth is on, listing only that user’s sessions still matches what we’d expect.
On consistency with admin/sessions and batches, I treated GET /api/v1/sessions as the normal client API (not admin), so limiting the list to the logged-in user should be fine there. I get that other endpoints don’t all behave the same yet, if you prefer not changing session listing, I’m fine dropping it. We can figure out filtering for sessions/batches in a follow-up once there’s a clean plan.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "Yutong-1424 (via GitHub)" <gi...@apache.org>.
Yutong-1424 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4261066481
> Wrong click the merge button, but let's wait for CI results ...
we should be good? the failed one likely a connection errors...
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4257722382
Wrong click the merge button, but let's wait for CI results ...
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3072830967
##########
kyuubi-server/src/main/scala/org/apache/kyuubi/server/api/v1/SessionsResource.scala:
##########
@@ -52,11 +52,15 @@ private[v1] class SessionsResource extends ApiRequestContext with Logging {
content = Array(new Content(
mediaType = MediaType.APPLICATION_JSON,
array = new ArraySchema(schema = new Schema(implementation = classOf[SessionData])))),
- description = "get the list of all live sessions")
+ description = "get the list of live sessions for the current user")
@GET
def sessions(): Seq[SessionData] = {
- sessionManager.allSessions()
- .map(session => ApiUtils.sessionData(session.asInstanceOf[KyuubiSession])).toSeq
+ val userName = fe.getSessionUser(Map.empty[String, String])
+ sessionManager
+ .allSessions()
+ .filter(session => session.user == userName)
Review Comment:
it's reasonable for security purposes, but it's a breaking change.
I would suggest making this change independent, with an internal legacy config switch (something like `kyuubi.frontend.rest.legacy.v1SessionsReturnAllUsers`), and adding an item in the migration guide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3072830967
##########
kyuubi-server/src/main/scala/org/apache/kyuubi/server/api/v1/SessionsResource.scala:
##########
@@ -52,11 +52,15 @@ private[v1] class SessionsResource extends ApiRequestContext with Logging {
content = Array(new Content(
mediaType = MediaType.APPLICATION_JSON,
array = new ArraySchema(schema = new Schema(implementation = classOf[SessionData])))),
- description = "get the list of all live sessions")
+ description = "get the list of live sessions for the current user")
@GET
def sessions(): Seq[SessionData] = {
- sessionManager.allSessions()
- .map(session => ApiUtils.sessionData(session.asInstanceOf[KyuubiSession])).toSeq
+ val userName = fe.getSessionUser(Map.empty[String, String])
+ sessionManager
+ .allSessions()
+ .filter(session => session.user == userName)
Review Comment:
it's reasonable for security purposes, but it's a breaking change.
I would suggest making this change independent, with an internal legacy config switch (something like `kyuubi.frontend.rest.legacy.sessionsReturnAllUsers`), and adding an item in the migration guide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4261140347
yeah, it's good, thanks for contribution
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4222550804
can we have the returned configs content configurable? e.g., `ORIGINAL`, `REDACTED`, `NONE`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 merged PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "Yutong-1424 (via GitHub)" <gi...@apache.org>.
Yutong-1424 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3082006942
##########
kyuubi-server/src/main/scala/org/apache/kyuubi/server/api/v1/SessionsResource.scala:
##########
@@ -52,11 +52,15 @@ private[v1] class SessionsResource extends ApiRequestContext with Logging {
content = Array(new Content(
mediaType = MediaType.APPLICATION_JSON,
array = new ArraySchema(schema = new Schema(implementation = classOf[SessionData])))),
- description = "get the list of all live sessions")
+ description = "get the list of live sessions for the current user")
@GET
def sessions(): Seq[SessionData] = {
- sessionManager.allSessions()
- .map(session => ApiUtils.sessionData(session.asInstanceOf[KyuubiSession])).toSeq
+ val userName = fe.getSessionUser(Map.empty[String, String])
+ sessionManager
+ .allSessions()
+ .filter(session => session.user == userName)
Review Comment:
Thanks for your comments, all comments addressed:
- Config renamed to `kyuubi.server.conf.retrieveMode`
- Using enum
- Added legacy session list config with migration guide
- Regenerated settings.md
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "wangzhigang1999 (via GitHub)" <gi...@apache.org>.
wangzhigang1999 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4208209987
One concern on the user-based filtering for GET /api/v1/sessions — we already have GET /api/v1/admin/sessions in AdminResource with user filtering support, and BatchesResource doesn't enforce user filtering either, so this would be inconsistent. Also without authentication enabled, anyone can claim any identity, so the filtering provides no real security.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3072793941
##########
kyuubi-common/src/main/scala/org/apache/kyuubi/config/KyuubiConf.scala:
##########
@@ -3336,6 +3336,21 @@ object KyuubiConf {
.regexConf
.createOptional
+ val SESSION_CONF_DISPLAY_MODE: ConfigEntry[String] =
+ buildConf("kyuubi.session.conf.display.mode")
Review Comment:
how about "kyuubi.server.conf.retrieveMode"? we might extend the effective scope to batch, operation, server conf display, etc.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4233974810
@Yutong-1424, does the global server-side config meet your requirements? if so, this is fine. if you want fine-grained control capabilities, we can allow client-side config override and check it on the server-side, the check rules might be flexible, and we can discuss details during implementation.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3072830967
##########
kyuubi-server/src/main/scala/org/apache/kyuubi/server/api/v1/SessionsResource.scala:
##########
@@ -52,11 +52,15 @@ private[v1] class SessionsResource extends ApiRequestContext with Logging {
content = Array(new Content(
mediaType = MediaType.APPLICATION_JSON,
array = new ArraySchema(schema = new Schema(implementation = classOf[SessionData])))),
- description = "get the list of all live sessions")
+ description = "get the list of live sessions for the current user")
@GET
def sessions(): Seq[SessionData] = {
- sessionManager.allSessions()
- .map(session => ApiUtils.sessionData(session.asInstanceOf[KyuubiSession])).toSeq
+ val userName = fe.getSessionUser(Map.empty[String, String])
+ sessionManager
+ .allSessions()
+ .filter(session => session.user == userName)
Review Comment:
it's reasonable for security purposes, but it's a breaking change.
I would suggest making this change independent, with an internal legacy config switch (something like `kyuubi.frontend.rest.v1.legacy.sessionsReturnAllUsers`), and adding an item in the migration guide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3072830967
##########
kyuubi-server/src/main/scala/org/apache/kyuubi/server/api/v1/SessionsResource.scala:
##########
@@ -52,11 +52,15 @@ private[v1] class SessionsResource extends ApiRequestContext with Logging {
content = Array(new Content(
mediaType = MediaType.APPLICATION_JSON,
array = new ArraySchema(schema = new Schema(implementation = classOf[SessionData])))),
- description = "get the list of all live sessions")
+ description = "get the list of live sessions for the current user")
@GET
def sessions(): Seq[SessionData] = {
- sessionManager.allSessions()
- .map(session => ApiUtils.sessionData(session.asInstanceOf[KyuubiSession])).toSeq
+ val userName = fe.getSessionUser(Map.empty[String, String])
+ sessionManager
+ .allSessions()
+ .filter(session => session.user == userName)
Review Comment:
it's reasonable for security purposes, but it's a breaking change.
I would suggest making this change independent, with an internal legacy config switch (something like `kyuubi.frontend.rest.legacy.v1.sessionsReturnAllUsers`), and adding an item in the migration guide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "pan3793 (via GitHub)" <gi...@apache.org>.
pan3793 commented on code in PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#discussion_r3090642623
##########
kyuubi-common/src/main/scala/org/apache/kyuubi/config/KyuubiConf.scala:
##########
@@ -3336,6 +3336,32 @@ object KyuubiConf {
.regexConf
.createOptional
+ val SERVER_CONF_RETRIEVE_MODE: ConfigEntry[String] =
+ buildConf("kyuubi.server.conf.retrieveMode")
+ .serverOnly
+ .doc("Controls how session configurations are returned in REST API responses. " +
+ "Supported values: " +
+ "<ul>" +
+ "<li>REDACTED: Mask values that match kyuubi.server.redaction.regex (default).</li>" +
+ "<li>ORIGINAL: Return the raw config values as-is.</li>" +
+ "<li>NONE: Omit the conf map from responses entirely.</li>" +
+ "</ul>")
+ .version("1.12.0")
+ .stringConf
+ .checkValues(Set("REDACTED", "ORIGINAL", "NONE"))
+ .createWithDefault("REDACTED")
Review Comment:
this is a user-facing change, also needs to be mentioned in migration guide
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "Yutong-1424 (via GitHub)" <gi...@apache.org>.
Yutong-1424 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4233759215
> can we make the returned configs content configurable? e.g., `ORIGINAL`, `REDACTED`, `NONE`
Are you suggesting the conf display behavior should depend on the caller's role? For example, admins see the full config while regular users see redacted or nothing? or uses a single global mode kyuubi.session.conf.display.mode to set defult is REDACTED
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
Re: [PR] Improve session REST security [kyuubi]
Posted by "Yutong-1424 (via GitHub)" <gi...@apache.org>.
Yutong-1424 commented on PR #7391:
URL: https://github.com/apache/kyuubi/pull/7391#issuecomment-4234684125
I implemented `kyuubi.session.conf.display.mode` with REDACTED, ORIGINAL, and NONE as discussed, and covered by SessionsResourceSuite tests. Happy to adjust if you had something else in mind. @pan3793
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org