[ 
https://issues.apache.org/jira/browse/IGNITE-19077?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mikhail Pochatkin updated IGNITE-19077:
---------------------------------------
    Epic Link: IGNITE-19280

> Investigation: Apply cutom cluster config on cluster init
> ---------------------------------------------------------
>
>                 Key: IGNITE-19077
>                 URL: https://issues.apache.org/jira/browse/IGNITE-19077
>             Project: Ignite
>          Issue Type: Task
>          Components: rest
>            Reporter: Aleksandr
>            Priority: Major
>              Labels: ignite-3
>
> Looking at ClusterManagementGroupManager#onElectedAsLeader we can see that 
> REST authentication configuration is applied to the distributed configuration 
> on leader election. This happens because there is no any other way to put any 
> values to the cluster configuration on init. This leads to the following 
> situation:
> - cluster init in progress, some REST endpoints are blocked 
> (cluster/configuration for example)
> - cluster initialized, REST is available without auth 
> *anybody can use the REST*
> - authentication configuration is applied to the distributed configuration 
> and REST is secured
> To fix this issue we have to design the solution for "atomic configuration 
> initialization" of something like this. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to