Allow migrating H2 to ChronicleMap from non-admin

Non-admins should be delegated to be able to migrate
the H2 caches to ChronicleMap, so that service users
can be safely used without having to compromise the
admin credentials.

Also fix a security hole where all registered users
were allowed to run any SSH commands provided by
the plugin and apply instead the same authorization
policy enforced for the H2 migration REST-API.

Bug: Issue 14793
Change-Id: I2935403ca23f833af8b1e8065f6eee5f9e4dd7fe
13 files changed
tree: e61f7fb766e506e272791baa4b50ea5d2b6aec34
  1. src/
  2. .gitignore
  3. BUILD
  4. external_plugin_deps.bzl
  5. Jenkinsfile
  6. LICENSE
  7. README.md
README.md

Persistent cache for Gerrit, based on ChronicleMap

Non-blocking and super-fast on-disk cache libModule for Gerrit Code Review based on ChronicleMap on-disk implementation.

How to build

This libModule is built like a Gerrit in-tree plugin, using Bazelisk. See the build instructions for more details.

Setup

  • Install cache-chronicalmap module

Install the chronicle-map module into the $GERRIT_SITE/lib directory.

Add the cache-chroniclemap module to $GERRIT_SITE/etc/gerrit.config as follows:

[gerrit]
  installModule = com.googlesource.gerrit.modules.cache.chroniclemap.ChronicleMapCacheModule

For further information and supported options, refer to config documentation.

Migration from H2 caches

You can check how to migrate from H2 to chronicle-map here.