Arpad Müller e310533ed3 Support JWT key reload in pageserver (#5594) ...

## Problem

For quickly rotating JWT secrets, we want to be able to reload the JWT
public key file in the pageserver, and also support multiple JWT keys.

See #4897.

## Summary of changes

* Allow directories for the `auth_validation_public_key_path` config
param instead of just files. for the safekeepers, all of their config options
also support multiple JWT keys.
* For the pageservers, make the JWT public keys easily globally swappable
by using the `arc-swap` crate.
* Add an endpoint to the pageserver, triggered by a POST to
`/v1/reload_auth_validation_keys`, that reloads the JWT public keys from
the pre-configured path (for security reasons, you cannot upload any
keys yourself).

Fixes #4897

---------

Co-authored-by: Heikki Linnakangas <heikki@neon.tech>
Co-authored-by: Joonas Koivunen <joonas@neon.tech>

2023-11-07 15:43:29 +01:00

..

benches

Rename more zid-like idents (#2480)

2022-09-20 11:06:31 -07:00

scripts

Feat/postgres 16 (#4761)

2023-09-12 15:11:32 +02:00

src

Support JWT key reload in pageserver (#5594)

2023-11-07 15:43:29 +01:00

tests

Remove sync postgres_backend, tidy up its split usage.

2023-03-09 20:45:56 +03:00

Cargo.toml

Support JWT key reload in pageserver (#5594)

2023-11-07 15:43:29 +01:00