[
https://issues.apache.org/jira/browse/KUDU-3674?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Marton Greber updated KUDU-3674:
--------------------------------
Parent: KUDU-3691
Issue Type: Sub-task (was: Improvement)
> Implement the ability for endpoints to skip auth
> ------------------------------------------------
>
> Key: KUDU-3674
> URL: https://issues.apache.org/jira/browse/KUDU-3674
> Project: Kudu
> Issue Type: Sub-task
> Reporter: Marton Greber
> Assignee: Marton Greber
> Priority: Minor
> Labels: observability
>
> It would be helpful to allow certain endpoints to be exposed without
> authentication, even when --webserver_require_spnego is enabled at the
> webserver level.
> A common example is Prometheus metrics and service discovery endpoints, since
> Prometheus does not support SPNEGO. With this feature, we could make those
> specific endpoints publicly accessible, while keeping all other endpoints
> protected by SPNEGO authentication.
> If desired, this could be extended to support different authentication
> mechanisms per endpoint. (eg doing basic auth for prometheus if necessary:
> https://prometheus.io/docs/guides/basic-auth/ )
--
This message was sent by Atlassian Jira
(v8.20.10#820010)