Vyom Mani Tiwari created RANGER-5868:
----------------------------------------
Summary: Apply service-config endpoint validation consistently to
KMS provider URLs
Key: RANGER-5868
URL: https://issues.apache.org/jira/browse/RANGER-5868
Project: Ranger
Issue Type: Improvement
Components: admin, kms
Reporter: Vyom Mani Tiwari
Assignee: Vyom Mani Tiwari
RANGER-5541 and RANGER-5812 added validation of endpoint URLs in service
configurations for Test Connection and resource lookup. This improvement
extends that validation so it is applied consistently for KMS services:
* Apply the endpoint validation in KmsKeyMgr before Key Manager operations
(get, search, create, rollover, delete) connect to the configured KMS provider.
* Evaluate the endpoint the KMS client actually connects to: parse nested
provider URIs (kms://…) the same way the client does, normalise encoded values,
and validate every host in a multi-host (HA) provider list.
* Do not follow HTTP redirects in the Key Manager and Test Connection KMS
clients.
* Report a validation failure to the caller as an invalid-input error instead
of “service not found”.
* Add unit tests covering these paths, including HA provider lists that must
continue to work.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
