Aias00 opened a new issue, #1430:
URL: https://github.com/apache/rocketmq-dashboard/issues/1430

   Parent: #1312
   
   ## Problem
   
   `RuntimeAdminClientResolver` always creates an admin client with a null 
`RPCHook`. A future ACL provider cannot query or mutate an ACL-enabled Apache 
cluster through this path.
   
   ## Goal
   
   Define and implement a selected-instance credential reference plus 
authenticated AdminClient construction, without exposing secrets through the 
API or reusing cloud-provider credentials.
   
   ## Acceptance criteria
   
   - An Apache instance can reference an encrypted/externally supplied admin 
credential.
   - `RuntimeAdminClientResolver` injects the correct ACL hook only for that 
instance.
   - Missing credentials return an explicit authorization/configuration error, 
never a fallback unauthenticated call.
   - Existing non-ACL Apache instances continue to work.
   - Credentials are redacted in all API responses and audit records.
   
   ## Non-goals
   
   No ACL policy read/write in this PR; this is the prerequisite for the later 
ACL 2.0 provider.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to