4paradigm / 4paradigm/OpenMLDB
Support secured ZooKeeper cluster for OpenMLDB
- Dominant language
- C++
- Stars
- 1.7k
- Forks
- 331
- Avg merge
- 12d 12h
- Merged PRs (30d)
- 1
Description
For C++ and Java modules like NameServer and TaskManager, we should support secured ZooKeeper cluster by setting jaas file and krb5 file.
Here is the example code the enable secured ZK in Java processes.
```
if (isZkSecure) {
LOG.info("Connect with secure ZooKeeper cluster, use " + jaasFile + " and " + krb5File);
System.setProperty("java.security.auth.login.config", jaasFile);
System.setProperty("java.security.krb5.conf", krb5File);
}
```
Contributor guide
Research direction
The issue mentions enabling secured ZooKeeper for C++ and Java modules like NameServer and TaskManager. Look for where ZooKeeper connections are configured in these modules. The example shows setting Java system properties for JAAS and krb5 files; similar secure configuration may be needed for C++ components. Check existing ZK client initialization code to see where authentication can be added. Testing will involve setting up a secure ZK cluster and verifying connections.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- backend, databases, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100