[
https://issues.apache.org/jira/browse/KNOX-2997?focusedWorklogId=897421&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-897421
]
ASF GitHub Bot logged work on KNOX-2997:
----------------------------------------
Author: ASF GitHub Bot
Created on: 29/Dec/23 04:10
Start Date: 29/Dec/23 04:10
Worklog Time Spent: 10m
Work Description: lmccay commented on code in PR #830:
URL: https://github.com/apache/knox/pull/830#discussion_r1437974021
##########
gateway-service-definitions/src/main/resources/services/kafkaui.1.0.0/service.xml:
##########
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+<service role="KAFKAUI" name="kafkaui" version="1.0.0">
+ <metadata>
+ <type>UI</type>
+ <context>/kafka/</context>
+ <shortDesc>kafka Web UI</shortDesc>
+ <description></description>
+ </metadata>
+ <routes>
+ <route path="/kafka/">
+ </route>
+ <route path="/kafka/**">
+ </route>
+ <route path="/kafka/**?**">
+ </route>
+ </routes>
+ <dispatch classname="org.apache.knox.gateway.dispatch.ConfigurableDispatch"
+
ha-classname="org.apache.knox.gateway.ha.dispatch.ConfigurableHADispatch">
+ <param>
+ <name>responseExcludeHeaders</name>
+ <value>WWW-AUTHENTICATE</value>
+ </param>
Review Comment:
I want to make sure that we are clear on what is expected. Please excuse me
if I explain something you already know but this is important to have clear for
Knox contributions like this.
Knox is a trusted proxy or proxyuser in the hadoop ecosystem. That means
that it will authenticate users in some knox admin configured manner and tell
the backend service the identity of the authenticated user. The backend service
trusts Knox to assert this identity because the knox user is authenticated to
the service via kerberos in addition to the authenticated user's identity being
sent as a doas param. So, there are many front end authentication methods
available through Knox (including but not limited to kerberos) and kerberos is
required between Knox and the backend service that is being proxied.
So, the fact that you have excluded the WWW-AUTHENTICATE header points to
something that you were likely working through in you dev env. Perhaps, you
don't have kerberos enabled and the proxyuser settings for kafka set to
included Knox or something like that.
Bottom line is that you shouldn't have to do anything with the
authentication header from the proxied service to Knox for the kerberos
challenge in the service definition. So, we have to figure out why you found
that you needed to.
Issue Time Tracking
-------------------
Worklog Id: (was: 897421)
Time Spent: 50m (was: 40m)
> Add kafka ui support in service definition.
> --------------------------------------------
>
> Key: KNOX-2997
> URL: https://issues.apache.org/jira/browse/KNOX-2997
> Project: Apache Knox
> Issue Type: New Feature
> Components: Release
> Reporter: zhaoshuaihua
> Priority: Major
> Attachments:
> KNOX-2997_-_Add_kafka_ui_support_in_service_definition_.patch,
> image-2023-12-28-17-11-42-566.png, image-2023-12-28-17-11-55-676.png
>
> Time Spent: 50m
> Remaining Estimate: 0h
>
> Apache Kafka is a distributed streaming platform initially developed by
> LinkedIn and later open-sourced as an Apache Software Foundation project.
> Designed for handling real-time data streams, Kafka supports high throughput,
> persistent storage, and horizontal scalability.kafka has its own ui.
> We can support it in knox service definition.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
