Hello Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/5930
to look at the new patch set (#10).
Change subject: [security] tailored TokenSigner for system catalog
......................................................................
[security] tailored TokenSigner for system catalog
Updated the TokenSigner class in preparation for loading
and storing public part of token signing keys from/to system catalog.
The expected use-case for the TokenSigner is calling
AddTokenSigningPublicKey() multiple times while loading public part
of TSKs from the system catalog and subsequent call of
GenerateSigningKey(). Then, the public part of the newly generated
TSK is stored into the system table. If the data successfully stored,
call SetSigningKey() to set the newly generated TSK as TokenSigner's
signing key. That's also the sequence to be exercised by a master
server upon becoming a leader. It's possible to run this sequence
multiple times on the same instance of TokenSigner.
Change-Id: Ie2417e2ccba6a1114db366b2f642f95362bf479c
---
M src/kudu/master/CMakeLists.txt
D src/kudu/master/authn_token_manager.cc
D src/kudu/master/authn_token_manager.h
M src/kudu/master/master.cc
M src/kudu/master/master.h
M src/kudu/master/master_service.cc
M src/kudu/security/token-test.cc
M src/kudu/security/token.proto
M src/kudu/security/token_signer.cc
M src/kudu/security/token_signer.h
M src/kudu/security/token_signing_key.cc
M src/kudu/security/token_signing_key.h
M src/kudu/security/token_verifier.cc
M src/kudu/security/token_verifier.h
14 files changed, 718 insertions(+), 304 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/30/5930/10
--
To view, visit http://gerrit.cloudera.org:8080/5930
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ie2417e2ccba6a1114db366b2f642f95362bf479c
Gerrit-PatchSet: 10
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <aser...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <aser...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <danburk...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <t...@apache.org>
