fix: Clean up krb self written stuff entirely (#72)

* fix: cleanup krb stuff entirely fix: version * chore: update todo-counter badge --------- Co-authored-by: GitHub Action <[email protected]>
severstal-digital · Mar 4, 2025 · 341a82c · 341a82c
1 parent 0f5123f
commit 341a82c
Show file tree

Hide file tree

Showing 10 changed files with 29 additions and 351 deletions.
diff --git a/.github/assets/todo-count-badge.svg b/.github/assets/todo-count-badge.svg
diff --git a/tests/unit/test_krb_timeout.py b/tests/unit/test_krb_timeout.py
diff --git a/tests/unit/test_parse_kinit.py b/tests/unit/test_parse_kinit.py
diff --git a/wunderkafka/config/krb/rdkafka.py b/wunderkafka/config/krb/rdkafka.py
@@ -4,6 +4,11 @@
 from wunderkafka.config.rdkafka import RDKafkaConfig
 from wunderkafka.config.generated import enums
 
+import time
+import subprocess
+
+REQUIRES_KERBEROS = frozenset([enums.SecurityProtocol.sasl_ssl, enums.SecurityProtocol.sasl_plaintext])
+
 
 def exclude_gssapi(builtin_features: str) -> str:
     features = [feature.strip() for feature in builtin_features.split(',') if feature.strip() != 'sasl_gssapi']
@@ -45,3 +50,21 @@ def challenge_krb_arg(exc: KafkaError, config: RDKafkaConfig) -> RDKafkaConfig:
         logger.warning(f'Changing builtin.features: {old} -> {new}')
         config.builtin_features = new
         return config
+
+
+def init_kerberos(kinit_cmd: str, timeout: int = 60) -> None:
+    t0 = time.perf_counter()
+    refresh_cmd = kinit_cmd.split()
+    try:
+        subprocess.run(refresh_cmd, timeout=timeout, stdout=subprocess.PIPE, check=True)
+    # Will retry shortly
+    except (subprocess.CalledProcessError, subprocess.TimeoutExpired) as exc:
+        logger.error(exc.output)
+        logger.error(exc.stdout)
+        logger.error(exc.stderr)
+        logger.error(f'Command: {refresh_cmd} exit error: {str(exc)}')
+        logger.warning("Krb not refreshed!")
+    else:
+        duration = int(1000 * (time.perf_counter() - t0))
+        logger.info(f'Refreshed! ({duration} ms)')
+
diff --git a/wunderkafka/hotfixes/__init__.py b/wunderkafka/hotfixes/__init__.py
diff --git a/wunderkafka/hotfixes/watchdog/__init__.py b/wunderkafka/hotfixes/watchdog/__init__.py
diff --git a/wunderkafka/hotfixes/watchdog/krb/__init__.py b/wunderkafka/hotfixes/watchdog/krb/__init__.py
diff --git a/wunderkafka/hotfixes/watchdog/krb/ticket.py b/wunderkafka/hotfixes/watchdog/krb/ticket.py