[
https://issues.apache.org/jira/browse/KAFKA-2641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14958542#comment-14958542
]
ASF GitHub Bot commented on KAFKA-2641:
---------------------------------------
GitHub user fpj opened a pull request:
https://github.com/apache/kafka/pull/313
KAFKA-2641: Upgrade path for ZK authentication
This pull request adds a configuration parameter and a migration tool. It
is also based on pull request #303, which should go in first.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/fpj/kafka KAFKA-2641
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/kafka/pull/313.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #313
----
commit 6a1ca42c41f0e577e33bf92cdc6aa6ec3a8da237
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-12T21:55:10Z
Initial pass, main code compiles
commit afeafabdcefc2dd93f28ab5e23041be7ebe08f3b
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T12:10:43Z
Changes to tests to accomodate the refactoring of ZkUtils.
commit 66b116aace0990182d76b6591b50491f072b95cb
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T12:59:06Z
Removed whitespaces.
commit 36c3720c734c003d306af76846a5531d844fdfc3
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T13:27:43Z
KAFKA-2639: Added close() method to ZkUtils
commit a7ae4337f93c194f56456bd3b96c2f874e248190
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T13:49:21Z
KAFKA-2639: Fixed PartitionAssignorTest
commit 78ee23d52ec0b4163c510b581910a610cd343c89
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T14:09:50Z
KAFKA-2639: Fixed ReplicaManagerTest
commit 2e888de090cf4b33a09e6184217191c3563aea9d
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T14:26:33Z
KAFKA-2639: Fixed ZKPathTest
commit b94fd4bba9b8a29b7bbab62c74a4214b74504704
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T16:03:05Z
KAFKA-2639: Made isSecure a parameter of the factory methods for ZkUtils
commit bd46f61800a5e47e5d4c15df2c5721303bc4c65e
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-13T16:49:05Z
KAFKA-2639: Fixed KafkaConfigTest.
commit 8c69f239a0bd255b0379d761970996f380b00cd6
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T08:38:17Z
KAFKA-2639: Removing config via KafkaConfig.
commit 00a816957c85601af0b4434768174bd1de91fe34
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T08:41:04Z
KAFKA-2639: Removed whitespaces.
commit 6b2fd2af854c9e762331391723286fe53c91f2b3
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T11:36:25Z
Adding initial configuration and support to set acls
commit 311612f533a8378b7c922016e632c3b703acc844
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T11:49:54Z
KAFKA-2639: Removed unrelated comment from ZkUtils.
commit f76c72a71fd386e2dfe2fb0351d07f2b9eca0bef
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T13:43:07Z
KAFKA-2641: First cut at the ZK Security Migration Tool.
commit fb9a52a5becf910981f7bc42634f96a047f5750b
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T15:12:55Z
KAFKA-2639: Moved isSecure to JaasUtils in clients.
commit 8314c7f4a91bca7b48c0909d46211ba1db6ecb3b
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T17:14:29Z
KAFKA-2639: Covering more zk system properties.
commit 76a802d612f531d0a36c3ceab8c2a1f8964b558b
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-14T17:31:48Z
KAFKA-2639: Small update to log message and exception message in JaasUtils.
commit 45e39b6874e5082b659ad04c72cd693cf1bc26d8
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-15T08:41:37Z
KAFKA-2641: Adding script and moving the tool to the admin package.
commit 83e1dc545a72c762ff7ced24dd22cdcbb1204e74
Author: flavio junqueira <f...@apache.org>
Date: 2015-10-15T08:51:02Z
Merge branch 'KAFKA-2639' into KAFKA-2641
----
> Upgrade path for ZK authentication
> ----------------------------------
>
> Key: KAFKA-2641
> URL: https://issues.apache.org/jira/browse/KAFKA-2641
> Project: Kafka
> Issue Type: Sub-task
> Components: security
> Reporter: Flavio Junqueira
> Assignee: Flavio Junqueira
>
> If a cluster isn't secure and wants to migrate to secure, then it will need
> to execute the following steps with respect to ZK:
> # Perform a rolling restart passing the appropriate JAAS file to enable the
> ZK client to authenticate against the server
> # Run a ZkSecurityMigrationTool that will set the appropriate ACLs
> # Perform a second rolling restart to set `zookeeper.enable.secure.acls`
> This recipe assumes that the ZK ensemble has security on.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
