4paradigm / 4paradigm/OpenMLDB

Support secured ZooKeeper cluster for OpenMLDB

Open
#812 0 comments 0 reactions 1 assignee Claimed by @tobegit3hub View on GitHub
enhancement
Dominant language
C++
Stars
1.7k
Forks
331
Avg merge
12d 12h
Merged PRs (30d)
1

Description

For C++ and Java modules like NameServer and TaskManager, we should support secured ZooKeeper cluster by setting jaas file and krb5 file.

Here is the example code the enable secured ZK in Java processes.

```
if (isZkSecure) {
LOG.info("Connect with secure ZooKeeper cluster, use " + jaasFile + " and " + krb5File);
System.setProperty("java.security.auth.login.config", jaasFile);
System.setProperty("java.security.krb5.conf", krb5File);
}
```

Contributor guide

Open the contributing guide

Research direction

The issue mentions enabling secured ZooKeeper for C++ and Java modules like NameServer and TaskManager. Look for where ZooKeeper connections are configured in these modules. The example shows setting Java system properties for JAAS and krb5 files; similar secure configuration may be needed for C++ components. Check existing ZK client initialization code to see where authentication can be added. Testing will involve setting up a secure ZK cluster and verifying connections.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, databases, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.