[EPIC] Improve the user authentication system
- Dominant language
- Java
- Stars
- 3.2k
- Forks
- 935
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 315
Description
### Describe the proposal
Currently, we only implement authentication between the Gravitino client and the Gravitino server and the Gravitino server and Hive Metastore, catalogs such as Iceberg, HDFS, and Kafka are left unauthenticated. Additionally, there is no authentication between The Trino connector, Spark connector, and the Gravitino server, we need to improve it.
### Task list
- [ ] Authentication between Gravitino and specific catalogs
- [x] #3337
- [x] #3462
- [x] #3463
- [x] #3906
- [ ] Support multiple KDCs for Kerberos Hive catalog
- [ ] Authentication between Iceberg catalog and Gravitino.
- [ ] Authentication between Kafka and Gravitino.
- [ ] Trino connector authentication
- [ ] #4149
- [ ] Support authentication between Trino and Hive/Iceberg
- [ ] Spark connector authentication
- [ ] Use authentication between Trino and Gravitino
- [ ] Support authentication between Trino and Hive/Iceberg
- [ ] Gravitino Server supports user proxy
- [ ] Support e2e test
- [x] #3489
- [x] #3537
- [x] #3408
- [ ] Improvement and possible bugs
- [ ] apache/incubator-uniffle#824
Contributor guide
Assessment
This issue has not been assessed yet.