Skip to content
This repository has been archived by the owner on Dec 16, 2022. It is now read-only.

Design and implement Security and Authorization component #9

Closed
jordanpadams opened this issue Apr 10, 2020 · 4 comments
Closed

Design and implement Security and Authorization component #9

jordanpadams opened this issue Apr 10, 2020 · 4 comments
Assignees
@tdddblog
Labels
enhancement New feature or request Epic

Comments

@jordanpadams
Copy link
Member

No description provided.

@jordanpadams jordanpadams added enhancement New feature or request high Epic labels Apr 10, 2020
@jordanpadams
Copy link
Member Author

Eugene to begin working on thisd

@jordanpadams jordanpadams added this to the PDS.21 (ends 2020-07-15) milestone Jul 1, 2020
@jordanpadams
Copy link
Member Author

jordanpadams commented Jul 7, 2020 •
edited
Loading

@tdddblog 3 different sub-stories to-be-created:

  • network security - Server security, etc. (starting here)
  • application level security - Zookeeper + Solr

Could add more details about "levels of security" (admin versus operator). Per discussions, punting this down the pipeline. Include note in documentation that once you login you have admin access.

@jordanpadams jordanpadams removed this from the PDS.21 (ends 2020-07-15) milestone Jul 7, 2020
@tloubrieu-jpl
Copy link
Member

solr 8.5 breaks SSL (the java client can not work with this solr server version)
Eugene downgraded to 8.4 (this is in the documentation he's writing).

Eugene is now working on the network part of the security (with apache and nginx as proxies).

Documentation should be ready later today or tomorrow.

jordanpadams pushed a commit that referenced this issue Jul 16, 2020
@tdddblog
Design and implement Security and Authorization component #9 (#33)
1fdd854 
Network / server security (#28)
Application security (#29)

---

* Refactoring

* Production Deployment section

* ZooKeeper  mutual TLS authentication

* ZooKeeper authentication. ZooKeeper CLI.

* ZooKeeper TLS authentication. Solr clients.

* Solr mTLS authentication

* Security overview

* Reverse proxy and load balancer configuration (NGINX, Apache)

* Fixed typo

Co-authored-by: Eugene <karpenko@RAYL-AI846797.jpl.nasa.gov>
@jordanpadams
Copy link
Member Author

@tdddblog just checking this ticket is closed out?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@tdddblog tdddblog

Labels
enhancement New feature or request Epic
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@tdddblog @jordanpadams @tloubrieu-jpl