You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "fmorg-git (via GitHub)" <gi...@apache.org> on 2026/03/11 01:47:13 UTC
[PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
fmorg-git opened a new pull request, #9902:
URL: https://github.com/apache/ozone/pull/9902
Please describe your PR in detail:
* This PR comprises single tenant STS Ranger smoke tests.
* This PR depends on https://github.com/apache/ozone/pull/9901 and https://github.com/apache/ozone/pull/9900
## What is the link to the Apache JIRA
https://issues.apache.org/jira/browse/HDDS-14810
## How was this patch tested?
updating local branch with requisite changes and running the smoke tests
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "ChenSammi (via GitHub)" <gi...@apache.org>.
ChenSammi commented on code in PR #9902:
URL: https://github.com/apache/ozone/pull/9902#discussion_r3776112118
##########
hadoop-ozone/dist/src/main/smoketest/security/ozone-secure-sts.resource:
##########
@@ -0,0 +1,320 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+*** Settings ***
+Library OperatingSystem
+Library String
+Library BuiltIn
+Library DateTime
+Library Collections
+Resource ../commonlib.robot
+Resource ../s3/commonawslib.robot
+
+*** Variables ***
+${RANGER_ENDPOINT_URL} ${EMPTY}
+${STS_ENDPOINT_URL} http://s3g:9880/sts
+${S3G_ENDPOINT_URL} http://s3g:9878
+${ROLE_SESSION_NAME} sts-session-name
+${EXPIRED_STS_TOKEN_PROFILE} expired_sts_token
+${EXPIRED_STS_TOKEN_MIN_ELAPSED_SECONDS} 902
Review Comment:
@fmorg-git , we cannot afford to wait 902 seconds in ozone-secure-sts.robot in Ozone github CI.
There are two solutions for this,
1. remove this test case from the robot test, or
2. allow STS token to be expired quickly in test environment. To achieve this, we usually design some specific property for test, like a switch, if the property is turned on, means it's a test environment, then some constriction can be lowed.
Or you can first remove the test case in this patch, and open a new follow up JIRA to add back the test case later with solution 2.
Apart from this, the rest looks good.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "fmorg-git (via GitHub)" <gi...@apache.org>.
fmorg-git commented on PR #9902:
URL: https://github.com/apache/ozone/pull/9902#issuecomment-4814387066
commenting to remove stale label
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "ChenSammi (via GitHub)" <gi...@apache.org>.
ChenSammi commented on code in PR #9902:
URL: https://github.com/apache/ozone/pull/9902#discussion_r3781135411
##########
hadoop-ozone/dist/src/main/compose/ozonesecure-ha/test-ranger.sh:
##########
Review Comment:
Filed https://issues.apache.org/jira/browse/HDDS-16186.
Let's add a STS suite and move the tests under it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "fmorg-git (via GitHub)" <gi...@apache.org>.
fmorg-git commented on PR #9902:
URL: https://github.com/apache/ozone/pull/9902#issuecomment-5296424257
Thanks for the review and merge.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "ChenSammi (via GitHub)" <gi...@apache.org>.
ChenSammi commented on code in PR #9902:
URL: https://github.com/apache/ozone/pull/9902#discussion_r3776112118
##########
hadoop-ozone/dist/src/main/smoketest/security/ozone-secure-sts.resource:
##########
@@ -0,0 +1,320 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+*** Settings ***
+Library OperatingSystem
+Library String
+Library BuiltIn
+Library DateTime
+Library Collections
+Resource ../commonlib.robot
+Resource ../s3/commonawslib.robot
+
+*** Variables ***
+${RANGER_ENDPOINT_URL} ${EMPTY}
+${STS_ENDPOINT_URL} http://s3g:9880/sts
+${S3G_ENDPOINT_URL} http://s3g:9878
+${ROLE_SESSION_NAME} sts-session-name
+${EXPIRED_STS_TOKEN_PROFILE} expired_sts_token
+${EXPIRED_STS_TOKEN_MIN_ELAPSED_SECONDS} 902
Review Comment:
@fmorg-git , we cannot afford to wait 902 seconds in ozone-secure-sts.robot in Ozone github CI.
There are two solutions for this,
1. remove this test case from the robot test, or
2. allow STS token to be expired quickly in test environment. To achieve this, we usually design some specific property for test, like a switch, if the property is turned on, means it's a test environment, then some constriction can be lowed.
Or you can first remove the test case in this patch, and open a new follow up JIRA to add back the test case later with solution 2.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "fmorg-git (via GitHub)" <gi...@apache.org>.
fmorg-git commented on code in PR #9902:
URL: https://github.com/apache/ozone/pull/9902#discussion_r3779943113
##########
hadoop-ozone/dist/src/main/smoketest/security/ozone-secure-sts.resource:
##########
@@ -0,0 +1,320 @@
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements. See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+*** Settings ***
+Library OperatingSystem
+Library String
+Library BuiltIn
+Library DateTime
+Library Collections
+Resource ../commonlib.robot
+Resource ../s3/commonawslib.robot
+
+*** Variables ***
+${RANGER_ENDPOINT_URL} ${EMPTY}
+${STS_ENDPOINT_URL} http://s3g:9880/sts
+${S3G_ENDPOINT_URL} http://s3g:9878
+${ROLE_SESSION_NAME} sts-session-name
+${EXPIRED_STS_TOKEN_PROFILE} expired_sts_token
+${EXPIRED_STS_TOKEN_MIN_ELAPSED_SECONDS} 902
Review Comment:
I removed the expired token tests for now
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #9902:
URL: https://github.com/apache/ozone/pull/9902#issuecomment-4814322596
This PR has been marked as stale due to 21 days of inactivity. Please comment or remove the stale label to keep it open. Otherwise, it will be automatically closed in 7 days.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "ChenSammi (via GitHub)" <gi...@apache.org>.
ChenSammi merged PR #9902:
URL: https://github.com/apache/ozone/pull/9902
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #9902:
URL: https://github.com/apache/ozone/pull/9902#issuecomment-4627105921
This PR has been marked as stale due to 21 days of inactivity. Please comment or remove the stale label to keep it open. Otherwise, it will be automatically closed in 7 days.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
Re: [PR] HDDS-14810. [STS] Part 2 - STS Ranger Smoke Tests [ozone]
Posted by "fmorg-git (via GitHub)" <gi...@apache.org>.
fmorg-git commented on PR #9902:
URL: https://github.com/apache/ozone/pull/9902#issuecomment-4627110555
commenting to remove stale label
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org