fix(pd): validate REST credentials and return 401 on refusal - #3189

Open

bitflicker64 wants to merge 6 commits into

apache:masterfrom

bitflicker64:fix/pd-rest-auth-3188

Commits on Sep 3, 2026

fix(pd): validate REST credentials and return 401 on refusal
bitflicker64
committed
f796637
fix(pd): fail closed when auth.secret-key is absent, wire every client
bitflicker64
committed
1e3b616
fix(pd): ship no REST secret and keep the credential out of argv
bitflicker64
committed
5c339c1

Commits on Sep 4, 2026

fix(pd): unbreak the hstore smoke, decode credentials as UTF-8
bitflicker64
committed
3b39132
chore(ci): retrigger build-commons after a port-collision flake
bitflicker64
committed
b352e8c
test(pd): cover the REST credential check in process
bitflicker64
committed
ace8913