Alexey Serbin has posted comments on this change.

Change subject: [TLS cert management] security service implementation
......................................................................


Patch Set 1:

(9 comments)

http://gerrit.cloudera.org:8080/#/c/5674/1/src/kudu/security/security_service.cc
File src/kudu/security/security_service.cc:

PS1, Line 61: (s)
> this macro evaluates 's' a bunch of times, which is no good if it has side 
Done


PS1, Line 77: ((s).ToString()
> this is redundant with the string which already ends up in the statuspb (se
Done


PS1, Line 86: ConvertFromPBFormat
> usual style is 'DataFormatFromPB'
Done


Line 88:   if (PREDICT_FALSE(!format)) {
> just CHECK or DCHECK
Done


PS1, Line 111: server->result_tracker()
> hm, given that this .cc depends on kudu/rpc, I think we probably need it to
I separated this into securit_ca library.


Line 136:   unique_ptr<string> ca_cert_str(new string);
> this is a bit strange - I think a more readable way with the same perf woul
Looks good -- I think the performance of this could be a little bit better.


Line 167:   unique_ptr<string> cert_str(new string);
> see above
Done


http://gerrit.cloudera.org:8080/#/c/5674/1/src/kudu/security/security_service.h
File src/kudu/security/security_service.h:

Line 1: // Licensed to the Apache Software Foundation (ASF) under one
> think it makes sense to name this file specifically for the cert-signing se
Done


PS1, Line 42: master::Master
> this cyclic reference is a no-no.
Good catch.  It does not require master::Master, but just 
kudu::server::ServerBase to provide metrics and result tracker for the RPC 
server stub.


-- 
To view, visit http://gerrit.cloudera.org:8080/5674
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I4e4319c752ce64c53046db5d29c3d50306bdcdc5
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <aser...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <aser...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <danburk...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Mike Percy <mpe...@apache.org>
Gerrit-Reviewer: Todd Lipcon <t...@apache.org>
Gerrit-HasComments: Yes

Reply via email to