stackabletech / stackabletech/zookeeper-operator
Discovery ConfigMap does not expose AuthenticationClass for authenticated access to ZooKeeper
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 37
- Forks
- 11
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 10
Description
Currently, if an AuthenticationClass is set, the client access is encrypted and requires authentication.
This is not exposed in the discovery ConfigMap to be picked up by other operators to configure their ZooKeeper access.
The discovery ConfigMap currently expose 3 fields:
- ZOOKEEPER contains the full zookeeper connection string with znode (generally used)
- ZOOKEEPER_CHROOT contains the znode (i think only for Nifi currently)
- ZOOKEEPER_HOSTS contains the zookeeper connection string without znode (i think only for Nifi currently)
Temporary example proposal to add "secure" fields:
- ZOOKEEPER_SECURE
- ZOOKEEPER_HOSTS_SECURE
- (ZOOKEEPER_CHROOT_SECURE) would be redundant
- AUTHENTICATION_CLASS
This will be discussed further in the architecture meeting on 3rd of August.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the discovery ConfigMap implementation and the handling of AuthenticationClass in this operator. Review the proposed secure fields and the architecture discussion before choosing an exposed format. Done means the agreed authentication and secure connection information is available for other operators to configure ZooKeeper access.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, rust
- Domain
- distributed-systems, infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100