You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "adoroszlai (via GitHub)" <gi...@apache.org> on 2024/11/28 11:16:38 UTC

[PR] HDDS-11820. Remove hard-coded principals from ozone-testkrb5 [ozone-docker-testkrb5]

adoroszlai opened a new pull request, #10:
URL: https://github.com/apache/ozone-docker-testkrb5/pull/10

   ## What changes were proposed in this pull request?
   
   Test user principals are currently defined in the `apache/ozone-docker-testkrb5` repository.  Whenever a new principal is needed for tests, we need to:
   - commit updated `init.sh` in `apache/ozone-docker-testkrb5`
   - bump `ozone-testkrb5` image version in `apache/ozone`
   - update keytabs in `apache/ozone` (this steps is removed in HDDS-11810)
   
   This can be improved by creating principals just-in-time, right before exporting keytabs.
   
   Benefits:
   - simplifies the process of adding new principals
   - avoid mismatch in list of principals added and exported
   
   This PR removes hard-coded principals from the `ozone-testkrb5` image.
   
   https://issues.apache.org/jira/browse/HDDS-11820
   
   ## How was this patch tested?
   
   Ran secure acceptance tests with this image and corresponding Ozone change:
   https://github.com/adoroszlai/ozone/actions/runs/12067118583


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org


Re: [PR] HDDS-11820. Remove hard-coded principals from ozone-testkrb5 [ozone-docker-testkrb5]

Posted by "adoroszlai (via GitHub)" <gi...@apache.org>.
adoroszlai commented on PR #10:
URL: https://github.com/apache/ozone-docker-testkrb5/pull/10#issuecomment-2507082379

   Thanks @dombizita for the review.
   
   > the corresponding Ozone side change is [apache/ozone#7498](https://github.com/apache/ozone/pull/7498), right?
   
   That one is a pre-requisite for this, but another PR will follow after this image is available.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org


Re: [PR] HDDS-11820. Remove hard-coded principals from ozone-testkrb5 [ozone-docker-testkrb5]

Posted by "adoroszlai (via GitHub)" <gi...@apache.org>.
adoroszlai merged PR #10:
URL: https://github.com/apache/ozone-docker-testkrb5/pull/10


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org