andyhuangdev opened a new pull request, #11796: URL: https://github.com/apache/ozone/pull/11796
## What changes were proposed in this pull request? Revoking a tenant access id deletes its S3 secret but leaves no STS revocation cutoff. If the same access id is reassigned before an existing STS token expires, that token can become valid again. This change records the leader-generated cutoff during tenant access id revocation and persists it with the secret deletion. It preserves the highest existing cutoff and keeps replay behavior unchanged for older log entries without an attached cutoff. ## What is the link to the Apache JIRA [HDDS-17410](https://issues.apache.org/jira/browse/HDDS-17410) ## How was this patch tested? - TDD: confirmed the new regression tests failed before the fix; all 24 related unit tests passed afterward. - Three-OM RPC integration test verified cutoff persistence on every OM, rejection of old tokens after reassignment and leader failover, and successful use of newly issued tokens. Kerberos and Ranger use test substitutes; RPC, Ratis, and token cryptography are real. - Checkstyle and RAT checks for the affected modules passed. Full-project RAT encountered unrelated third-party files and existing build artifacts. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
