0AyanamiRei opened a new pull request, #65379:
URL: https://github.com/apache/doris/pull/65379
### What problem does this PR solve?
Issue Number: None
Related PR: None
Problem Summary:
Doris object storage access defaulted to plain HTTP in BE and Cloud S3
client configuration. FE endpoint connectivity validation also added `http://`
when users provided an S3-compatible endpoint without an explicit scheme.
Object storage services may disable HTTP and require HTTPS, so deployments that
do not explicitly configure a scheme can fail or use an insecure default.
This PR changes the default S3-compatible object storage access scheme to
HTTPS. It preserves explicit HTTP fallback for environments that set
`s3_client_http_scheme=http` or provide an `http://` endpoint.
### Release note
Default S3-compatible object storage access now uses HTTPS unless users
explicitly configure HTTP.
### Check List (For Author)
- Test
- [ ] Regression test
- [ ] Unit Test
- [x] Manual test (add detailed scripts or steps below)
- Ran `git diff --check upstream/master...HEAD` successfully.
- Ran focused object-storage scheme scan over BE, Cloud, and FE
object storage paths.
- Attempted `./run-fe-ut.sh --run
org.apache.doris.common.util.S3UtilTest`, but it could not run because Homebrew
is not installed in this macOS environment.
- [ ] No need to test or manual test. Explain why:
- [ ] This is a refactor/code format and no logic has been changed.
- [ ] Previous test can cover this change.
- [ ] No code files have been changed.
- [ ] Other reason
- Behavior changed:
- [ ] No.
- [x] Yes. Default S3-compatible object storage access changes from HTTP
to HTTPS. Explicit HTTP configuration remains supported.
- Does this need documentation?
- [x] No.
- [ ] Yes.
### Check List (For Reviewer who merge this PR)
- [ ] Confirm the release note
- [ ] Confirm test cases
- [ ] Confirm document
- [ ] Add branch pick label
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
