Marton Greber created KUDU-3674:
-----------------------------------

             Summary: Implement the ability for endpoints to skip auth
                 Key: KUDU-3674
                 URL: https://issues.apache.org/jira/browse/KUDU-3674
             Project: Kudu
          Issue Type: Improvement
            Reporter: Marton Greber
            Assignee: Marton Greber


It would be helpful to allow certain endpoints to be exposed without 
authentication, even when --webserver_require_spnego is enabled at the 
webserver level.

A common example is Prometheus metrics and service discovery endpoints, since 
Prometheus does not support SPNEGO. With this feature, we could make those 
specific endpoints publicly accessible, while keeping all other endpoints 
protected by SPNEGO authentication.

If desired, this could be extended to support different authentication 
mechanisms per endpoint. (eg doing basic auth for prometheus if necessary: 
https://prometheus.io/docs/guides/basic-auth/ )



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to