search

apolloconfig / apollo

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.
https://www.apolloconfig.com
Apache License 2.0
29.2k stars 10.21k forks source link

eureka目前没有认证机制，如果线上需要增加认证机制，这个代码层面目前是否有办法可以做到不影响线上服务的运行，通过升级增加上认证机制呢？如果可以，可以说下升级改造流程吗？ #5170

Closed hezhaoye closed 3 months ago

hezhaoye commented 4 months ago

eureka目前没有认证机制，如果线上需要增加认证机制，这个代码层面目前是否有办法可以做到不影响线上服务的运行，通过升级增加上认证机制呢？如果可以，可以说下升级改造流程吗？

nobodyiam commented 4 months ago

是指 eureka 服务注册认证还是 eureka 服务发现认证？ 服务注册认证是支持的：3.2.9 apollo.eureka.server.security.enabled - 配置是否开启eureka server的登录认证

hezhaoye commented 4 months ago

服务注册认证是支持的：3.2.9 apollo.eureka.server.security.enabled - 配置是否开启eureka server的登录认证

是指这个注册认证。对于已有的运行服务，这个升级的流程看文档没有提到。对于已有的服务开启这个特性，升级流程上有什么要注意的吗？

nobodyiam commented 4 months ago

可以搭建一个新的带注册认证的集群，而后把 meta server 的域名指向新的集群

hezhaoye commented 4 months ago

可以搭建一个新的带注册认证的集群，而后把 meta server 的域名指向新的集群

如果不搭建全新的集群，在已有混合的config Service上有办法可以做到平滑升级到开启认证机制吗

nobodyiam commented 4 months ago

建议在测试环境验证下，比如改了配置后一台一台重启

stale[bot] commented 3 months ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.

stale[bot] commented 3 months ago

This issue has been automatically closed because it has not had activity in the last 7 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.