This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
from 4a8868eb52f feat: `druid.s3.enableLegacyMd5` property added (#20055)
add ec7952b0e84 feat: druid-opa-authorizer extension for Open Policy Agent
authorization (#19670)
No new revisions were added by this update.
Summary of changes:
distribution/pom.xml | 2 +
docs/configuration/extensions.md | 1 +
.../extensions-contrib/druid-opa-authorizer.md | 189 +++++++++++++++
embedded-tests/pom.xml | 6 +
.../opa/OpaBasicAuthConfigurationDockerTest.java | 148 +++++++++++
.../OpaBasicAuthResource.java} | 73 +++---
.../opa/OpaLdapAuthConfigurationDockerTest.java | 139 +++++++++++
.../OpaLdapAuthResource.java} | 59 +++--
.../src/test/resources/opa-configs/druid.json | 41 ++++
.../src/test/resources/opa-configs/druid.rego | 20 ++
.../druid-opa-authorizer}/README.md | 5 +-
.../druid-opa-authorizer/example/druid.json | 79 ++++++
.../druid-opa-authorizer/example/druid.rego | 54 +++++
.../example/ldap/bootstrap.ldif | 91 +++++++
.../druid-opa-authorizer/example/ldap/run-ldap.sh | 40 ++-
.../example/setup/alice_pass.json | 3 +
.../example/setup/bob_pass.json | 3 +
.../example/setup/christy_pass.json | 3 +
.../example/setup/dylan_pass.json | 3 +
.../example/setup/eve_pass.json | 3 +
.../druid-opa-authorizer/example/setup/setup.sh | 25 +-
.../pom.xml | 83 +++----
.../apache/druid/security/opa/OpaAuthorizer.java | 259 ++++++++++++++++++++
.../apache/druid/security/opa/OpaDruidModule.java} | 8 +-
.../druid/security/opa/opatypes/OpaInput.java | 38 +--
.../druid/security/opa/opatypes/OpaMessage.java | 34 +--
.../druid/security/opa/opatypes/OpaResource.java | 34 ++-
.../druid/security/opa/opatypes/OpaResponse.java | 26 +-
.../org.apache.druid.initialization.DruidModule | 2 +-
.../druid/security/opa/OpaAuthorizerTest.java | 270 +++++++++++++++++++++
.../security/opa/opatypes/OpaMessageTest.java | 57 +++++
.../security/opa/opatypes/OpaResponseTest.java | 68 ++++++
pom.xml | 1 +
website/.spelling | 11 +
34 files changed, 1662 insertions(+), 216 deletions(-)
create mode 100644 docs/development/extensions-contrib/druid-opa-authorizer.md
create mode 100644
embedded-tests/src/test/java/org/apache/druid/testing/embedded/opa/OpaBasicAuthConfigurationDockerTest.java
copy
embedded-tests/src/test/java/org/apache/druid/testing/embedded/{auth/LdapAuthResource.java
=> opa/OpaBasicAuthResource.java} (55%)
create mode 100644
embedded-tests/src/test/java/org/apache/druid/testing/embedded/opa/OpaLdapAuthConfigurationDockerTest.java
copy
embedded-tests/src/test/java/org/apache/druid/testing/embedded/{auth/LdapAuthResource.java
=> opa/OpaLdapAuthResource.java} (70%)
create mode 100644 embedded-tests/src/test/resources/opa-configs/druid.json
create mode 100644 embedded-tests/src/test/resources/opa-configs/druid.rego
copy {publications/whitepaper =>
extensions-contrib/druid-opa-authorizer}/README.md (84%)
create mode 100644 extensions-contrib/druid-opa-authorizer/example/druid.json
create mode 100644 extensions-contrib/druid-opa-authorizer/example/druid.rego
create mode 100644
extensions-contrib/druid-opa-authorizer/example/ldap/bootstrap.ldif
copy .github/scripts/backport-pr.sh =>
extensions-contrib/druid-opa-authorizer/example/ldap/run-ldap.sh (53%)
create mode 100644
extensions-contrib/druid-opa-authorizer/example/setup/alice_pass.json
create mode 100644
extensions-contrib/druid-opa-authorizer/example/setup/bob_pass.json
create mode 100644
extensions-contrib/druid-opa-authorizer/example/setup/christy_pass.json
create mode 100644
extensions-contrib/druid-opa-authorizer/example/setup/dylan_pass.json
create mode 100644
extensions-contrib/druid-opa-authorizer/example/setup/eve_pass.json
copy .github/scripts/openrewrite.sh =>
extensions-contrib/druid-opa-authorizer/example/setup/setup.sh (54%)
copy extensions-contrib/{opentsdb-emitter => druid-opa-authorizer}/pom.xml
(85%)
create mode 100644
extensions-contrib/druid-opa-authorizer/src/main/java/org/apache/druid/security/opa/OpaAuthorizer.java
copy
extensions-contrib/{redis-cache/src/main/java/org/apache/druid/client/cache/RedisDruidModule.java
=>
druid-opa-authorizer/src/main/java/org/apache/druid/security/opa/OpaDruidModule.java}
(84%)
copy
indexing-service/src/main/java/org/apache/druid/indexing/common/actions/TaskActionHolder.java
=>
extensions-contrib/druid-opa-authorizer/src/main/java/org/apache/druid/security/opa/opatypes/OpaInput.java
(53%)
copy
indexing-service/src/main/java/org/apache/druid/indexing/common/actions/TaskActionHolder.java
=>
extensions-contrib/druid-opa-authorizer/src/main/java/org/apache/druid/security/opa/opatypes/OpaMessage.java
(61%)
copy
extensions-core/google-extensions/src/main/java/org/apache/druid/storage/google/GoogleAccountConfig.java
=>
extensions-contrib/druid-opa-authorizer/src/main/java/org/apache/druid/security/opa/opatypes/OpaResource.java
(71%)
copy
extensions-core/hdfs-storage/src/main/java/org/apache/druid/storage/hdfs/tasklog/HdfsTaskLogsConfig.java
=>
extensions-contrib/druid-opa-authorizer/src/main/java/org/apache/druid/security/opa/opatypes/OpaResponse.java
(68%)
copy extensions-contrib/{grpc-query =>
druid-opa-authorizer}/src/main/resources/META-INF/services/org.apache.druid.initialization.DruidModule
(94%)
create mode 100644
extensions-contrib/druid-opa-authorizer/src/test/java/org/apache/druid/security/opa/OpaAuthorizerTest.java
create mode 100644
extensions-contrib/druid-opa-authorizer/src/test/java/org/apache/druid/security/opa/opatypes/OpaMessageTest.java
create mode 100644
extensions-contrib/druid-opa-authorizer/src/test/java/org/apache/druid/security/opa/opatypes/OpaResponseTest.java
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
