Skip to content

Commit

Permalink
Adding config so that some tests will break if over-the-wire encrypti…
Browse files Browse the repository at this point in the history
…on fails (#78409)

Until recently, if a user configured over-the-wire encryption for repository-hdfs they would get an exception. That was fixed in an upgraded ticket in two ways: (1) jvm permissions were opened up for haddop2, and (2) support for the hadoop 3 hdfs client was added. This commit adds configuration to a couple of integration tests so that they fail if over-the-wire encryption is not working.
Relates #76897 #76734
  • Loading branch information
masseyke authored Oct 6, 2021
1 parent 248b229 commit 1445638
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@
path: "/user/elasticsearch/test/repository_create"
security:
principal: "[email protected]"
conf.dfs.encrypt.data.transfer.cipher.suites: "AES/CTR/NoPadding"

# Get repository
- do:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@
path: "/user/elasticsearch/test/snapshot"
security:
principal: "[email protected]"
conf.dfs.encrypt.data.transfer.cipher.suites: "AES/CTR/NoPadding"

# Create index
- do:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -84,6 +84,7 @@ public static void main(String[] args) throws Exception {
cfg.set(DFSConfigKeys.DFS_BLOCK_ACCESS_TOKEN_ENABLE_KEY, "true");
cfg.set(DFSConfigKeys.IGNORE_SECURE_PORTS_FOR_TESTING_KEY, "true");
cfg.set(DFSConfigKeys.DFS_ENCRYPT_DATA_TRANSFER_KEY, "true");
cfg.set(DFSConfigKeys.DFS_ENCRYPT_DATA_TRANSFER_CIPHER_SUITES_KEY, "AES/CTR/NoPadding");
}

UserGroupInformation.setConfiguration(cfg);
Expand Down

0 comments on commit 1445638

Please sign in to comment.