[jira] [Created] (HDDS-16971) Add a secure IPv6-only acceptance smoke test

["Siyao Meng (Jira)" <ji...@apache.org>]

Siyao Meng created HDDS-16971:
---------------------------------

             Summary: Add a secure IPv6-only acceptance smoke test
                 Key: HDDS-16971
                 URL: https://issues.apache.org/jira/browse/HDDS-16971
             Project: Apache Ozone
          Issue Type: Sub-task
          Components: docker-compose, test
            Reporter: Siyao Meng
            Assignee: Siyao Meng


HDDS-16969 added an IPv6-only smoke test for a non-secure cluster. This adds the same for a Kerberos cluster.

Add {{ipv6.yaml}} and {{test-ipv6.sh}} (suite HA-secure) to the {{ozonesecure-ha}} compose environment. The override replaces the static IPv4 addresses with an IPv6-only network. Principals and service addresses stay on DNS names. Recon and S3 Gateway use {{_HOST}} principals with the HTTP bind host set to {{::}}, which needs HDDS-16347.

The test runs {{ipv6/ipv6.robot}} (extended for secure mode, with a SPNEGO check), the delegation token suite, ozone shell, ofs, S3 with secrets, HttpFS, the admin CLI and OM leader transfer.

Two workarounds in the override should be removed once the cause is fixed:
* {{hdds.datanode.use.datanode.hostname=true}}, because certificates do not include IPv6 addresses (HDDS-16970).
* {{HADOOP_OPTS}} for the KMS container, because Hadoop sets {{-Djava.net.preferIPv4Stack=true}} by default.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org