Repository navigation
docs: StarRocks unmeasured-paths probe (package C) — spec, plan, findings report - #851
Merged
Merged
Conversation
Design for measuring UDFs, Hive/JDBC/Paimon catalogs, stream and routine load, and the CN/BE ports from inside the engine namespace on the fork's e2e harness, with a verdict model, sight controls, a typed opt-out and six open questions. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Eight tasks: harness, UDFs, JDBC and Hive, Paimon, loads, in-namespace ports on allin1, an optional kind run, and the full runs with the findings report. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Measure egret's access model on four unmeasured StarRocks paths (non-Iceberg catalogs, stream/routine load, CN/BE/FE ports from inside the namespace) on the official vs egret.4 image, plus the enable_http_auth mitigation variant. Official 47 ENFORCED / 34 LEAK; egret.4 68 / 14; mitigated 81 / 8 (0 BLIND, 0 ERROR in all three). The fork closes the catalog policy-rewrite family (C3-C13); enable_http_auth closes the anonymous BE-HTTP family; eight leaks survive both. Eleven follow-ups (FU-1..FU-11) each gated by the checks that must turn ENFORCED, including the kind finding that enable_http_auth breaks the CN health probes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Member
Author
|
Note: the two out-of-model known-issues landed as KI-360 / KI-361 in egret-data/docs#77 (KI-356–359 were taken by #850's docs). The report file itself carries no KI numbers, so nothing to change here. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Package C of the StarRocks follow-ups: a focused enforcement probe of the paths the existing fork patches and differential tests never exercised. This PR carries the package's platform docs — the design spec, the implementation plan and the findings report. The probe harness itself lives in the fork (
egret-data/egret-starrocksPR #8).What was measured
Official
starrocks/allin1-ubuntu:4.1.7vs the egret fork4.1.7-egret.4, plus the egret image with theenable_http_authmitigation. 0 BLIND / 0 ERROR in all three runs.enable_http_authThe fork closes the catalog policy-rewrite family (C3–C13);
enable_http_authcloses the anonymous BE-HTTP family. Eight leaks survive both, tracked as FU-1…FU-11: C14-paimon, S8-eve, S9, S11 (audit gap → package A), R7, N6, N8, N10-metrics. The report gives each check's three verdicts, the hypotheses H1–H8, the boundaries, and the follow-up table.Load-bearing kind finding:
enable_http_auth(the N2–N5/N11 mitigation) 401s the CN's unauthenticated k8s health probes, so it cannot ship as a one-line provisioner edit.The user-facing out-of-model findings are filed as KI-356 / KI-357 in
egret-data/docs.Docs
docs/en/(engineering docs). No user-visible feature change in this PR.🤖 Generated with Claude Code