[AUTHZ] Shade spark authz plugin

[yikf]

Why are the changes needed?

This PR aims to shade the kyuubi spark authz plugin to simplify the user's use.

How was this patch tested?

• Add some test cases that check the changes thoroughly including negative and positive cases if possible

• Add screenshots for manual tests if appropriate

• Run test locally before make a pull request

Was this patch authored or co-authored using generative AI tooling?

No

[yikf]

Since kyuubi supports different spark versions and ranger versions, and the cost of integration testing is too high, we initially use the default ranger version for functional testing.

In this PR, I test manually with ranger 2.4.0 and spark 3.4.0;

case 1: user root does not have select privilege on default/t1/id

case 2: user root have select privilege on default/t1/id

[yikf]

cc @pan3793

[codecov-commenter]

Codecov Report

Merging #5427 (695133d) into master (ffebc64) will not change coverage.
Report is 49 commits behind head on master.
The diff coverage is n/a.

❗ Current head 695133d differs from pull request most recent head d2f7ea8. Consider uploading reports for the commit d2f7ea8 to get more accurate results

@@          Coverage Diff           @@
##           master   #5427   +/-   ##
======================================
  Coverage    0.00%   0.00%           
======================================
  Files         590     588    -2     
  Lines       33436   33466   +30     
  Branches     4422    4401   -21     
======================================
- Misses      33436   33466   +30     

see 29 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[yikf]

In addition, I want to change the jar package name of shade so as not to affect the use of existing users, so two jars will be produced:

1. kyuubi-spark-authz_${scala.binary.version}-${project.version}.jar is original jar
2. shaded-kyuubi-spark-authz_${scala.binary.version}-${project.version} is a fat jar

Any thought? @yaooqinn @pan3793

[yaooqinn]

I suggest using a separate module for bundling， naming it kyuubi-spark-authz_xx-bundle.jar is fair enough?

Also the doc needs to be updated if we provide a new installation approach

[yikf]

Also the doc needs to be updated if we provide a new installation approach

Thank you for mentioning it. I will.

I suggest using a separate module for bundling， naming it kyuubi-spark-authz_xx-bundle.jar is fair enough?

Just a personal question, what are the benefits of this?

[cfmcgrady]

the jersey-client is a transitive dependency from the ranger client, shall we need to specify the jersey-client version when shading the authz plugin?

[yikf]

emm, i can't find this transitive dependency

[yikf]

Hi all, Any other comments? : )

[yikf]

Thanks all , merged to master.

[pan3793]

it's may not sufficient, please include the transitive jackson libs (spark is going to remove the jackson 1.x deps from the release tarball)