feat(yarn_client): auth config for YARN REST (none/simple/basic/kerberos)

Add per-Connection authentication so CDH 5 / Kerberos / HTTP Basic
clusters can be queried.

- auth_type: none / simple / basic / kerberos
- auth_user / auth_password for HTTP Basic
- auth_principal / auth_keytab stored for audit/display; actual SPNEGO
  handled by httpx-kerberos using the system Kerberos credential cache
- YarnClientConfig.auth_for_httpx() returns the right httpx.Auth object
- _request passes auth= through to httpx.request alongside verify=

New dependency: httpx-kerberos.

Tests cover none/simple (no auth object), Basic auth header,
Kerberos auth object, missing basic user, invalid auth_type, and
tool-layer config propagation.

This commit is contained in:

Claude

2026-06-26 13:57:57 +08:00

parent ad557b5984

commit 10f075ab7f

9 changed files with 256 additions and 8 deletions

									
										pyproject.toml
									
		+1
		
												View File
												
				@@ -7,6 +7,7 @@ dependencies = [

				    "fastapi-mcp>=0.4.0",

				    "gunicorn>=23.0",

				    "httpx>=0.28.1",

				    "httpx-kerberos>=0.1.2",

				    "loguru>=0.7.3",

				    "pydantic>=2.13.4",

				    "pydantic-core>=2.46.4",