[
https://issues.apache.org/jira/browse/KUDU-3674?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18080317#comment-18080317
]
Marton Greber commented on KUDU-3674:
-------------------------------------
https://issues.apache.org/jira/browse/KUDU-3693 will implement bearer token
auth. with that in mind it does not really make sense for this feature set to
include the endpoint auth skip. closing this.
> Implement the ability for endpoints to skip auth
> ------------------------------------------------
>
> Key: KUDU-3674
> URL: https://issues.apache.org/jira/browse/KUDU-3674
> Project: Kudu
> Issue Type: Sub-task
> Reporter: Marton Greber
> Assignee: Marton Greber
> Priority: Minor
> Labels: observability
>
> It would be helpful to allow certain endpoints to be exposed without
> authentication, even when --webserver_require_spnego is enabled at the
> webserver level.
> A common example is Prometheus metrics and service discovery endpoints, since
> Prometheus does not support SPNEGO. With this feature, we could make those
> specific endpoints publicly accessible, while keeping all other endpoints
> protected by SPNEGO authentication.
> If desired, this could be extended to support different authentication
> mechanisms per endpoint. (eg doing basic auth for prometheus if necessary:
> https://prometheus.io/docs/guides/basic-auth/ )
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
