Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add configuration for JWT authentication #639

Merged
merged 1 commit into from
Aug 21, 2024
Merged

Conversation

tomach
Copy link
Contributor

@tomach tomach commented Aug 8, 2024

Summary of changes

This change enables JWT authentication for crateDB version 5.7.2 and above

  • adds the following settings to the crate command in the StatefulSet
                "-Cauth.host_based.config.98.method": "jwt",
                "-Cauth.host_based.config.98.protocol": "http",
                "-Cauth.host_based.config.98.ssl": "on",
  • sets the JWT config for the admin user when a new cluster is deployed

  • restricts access for the admin user to the gc schema

  • updates the JWT config for the admin user after upgrading (or restoring a snapshot) to a version that supports JWT by running an ALTER USER with crash

Checklist

  • Link to issue this PR refers to: https://github.com/crate/cloud/issues/1912
  • Relevant changes are reflected in CHANGES.rst
  • Added or changed code is covered by tests
  • Documentation has been updated if necessary
  • Changed code does not contain any breaking changes (or this is a major version change)

@tomach tomach force-pushed the ta/jwt-authentication branch 2 times, most recently from 89f46b2 to 586c22a Compare August 8, 2024 08:46
@tomach tomach marked this pull request as ready for review August 9, 2024 14:58
Copy link
Member

@Taliik Taliik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@tomach tomach merged commit 749baed into master Aug 21, 2024
5 checks passed
@tomach tomach deleted the ta/jwt-authentication branch August 21, 2024 07:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants