You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pinot.apache.org by "mgranderath (via GitHub)" <gi...@apache.org> on 2023/10/10 15:04:04 UTC
[I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
mgranderath opened a new issue, #11777:
URL: https://github.com/apache/pinot/issues/11777
We have a requirement that all communication needs to be secured using mutual TLS, also Pinot internal communication. From our investigation we found that both GRPC servers for the multi-stage query engine ([QueryServer](https://github.com/apache/pinot/blob/873992f93d350ded958e20856ae455da89f990be/pinot-query-runtime/src/main/java/org/apache/pinot/query/service/server/QueryServer.java) and [GrpcMailboxServer](https://github.com/apache/pinot/blob/master/pinot-query-runtime/src/main/java/org/apache/pinot/query/mailbox/channel/GrpcMailboxServer.java)) do not follow the existing server TLS configuration and use plain-text communication.
### Additional context
- [Slack thread](https://apache-pinot.slack.com/archives/C011C9JHN7R/p1696405451815889)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "mgranderath (via GitHub)" <gi...@apache.org>.
mgranderath commented on issue #11777:
URL: https://github.com/apache/pinot/issues/11777#issuecomment-2213332596
Is there anything that I can do here to help get this across the line? We are still blocked from using the MSE due to this currently
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "anandheritage (via GitHub)" <gi...@apache.org>.
anandheritage commented on issue #11777:
URL: https://github.com/apache/pinot/issues/11777#issuecomment-1760701931
@xiangfu0 Let me know if this should be fine as a beginner task. I can start with this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "anandheritage (via GitHub)" <gi...@apache.org>.
anandheritage commented on issue #11777:
URL: https://github.com/apache/pinot/issues/11777#issuecomment-2233732758
@mgranderath Have started the work again : https://github.com/apache/pinot/pull/13645
Mostly like will finish off by the weekend.
If you have the access , kindly initiate the workflow for CI.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "ilamhs (via GitHub)" <gi...@apache.org>.
ilamhs commented on issue #11777:
URL: https://github.com/apache/pinot/issues/11777#issuecomment-2549286932
Thanks, this issue is complete and an integration test runs to check on the TLS for MSE as well https://github.com/apache/pinot/pull/14387, https://github.com/apache/pinot/pull/14476
Feel free to close this issue.
FYI @yashmayya
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "anandheritage (via GitHub)" <gi...@apache.org>.
anandheritage commented on issue #11777:
URL: https://github.com/apache/pinot/issues/11777#issuecomment-2213344331
@mgranderath Wasn't aware that it is blocking some major things.
Will connect with you - I had raised the PR but because of the changes in the file - I need to rework on this
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "mgranderath (via GitHub)" <gi...@apache.org>.
mgranderath commented on issue #11777:
URL: https://github.com/apache/pinot/issues/11777#issuecomment-2213483834
@anandheritage I'm in the slack workspace so you can message me there
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org
Re: [I] Configure QueryServer and GrpcMailboxServer for TLS [pinot]
Posted by "yashmayya (via GitHub)" <gi...@apache.org>.
yashmayya closed issue #11777: Configure QueryServer and GrpcMailboxServer for TLS
URL: https://github.com/apache/pinot/issues/11777
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org