HBASE-20512 document change to running tests on secure clusters Signed-off-by: Tak Lon (Stephen) Wu Signed-off-by: Sean Busbey <[email protected]>
Project: http://git-wip-us.apache.org/repos/asf/hbase/repo Commit: http://git-wip-us.apache.org/repos/asf/hbase/commit/695182bf Tree: http://git-wip-us.apache.org/repos/asf/hbase/tree/695182bf Diff: http://git-wip-us.apache.org/repos/asf/hbase/diff/695182bf Branch: refs/heads/HBASE-20387 Commit: 695182bfe32ea67e0e14fb17581b198c48cf8e10 Parents: 7f3d9f6 Author: Michael Stack <[email protected]> Authored: Tue Jul 31 13:42:26 2018 -0700 Committer: Michael Stack <[email protected]> Committed: Sat Aug 11 11:19:57 2018 -0700 ---------------------------------------------------------------------- src/main/asciidoc/_chapters/upgrading.adoc | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hbase/blob/695182bf/src/main/asciidoc/_chapters/upgrading.adoc ---------------------------------------------------------------------- diff --git a/src/main/asciidoc/_chapters/upgrading.adoc b/src/main/asciidoc/_chapters/upgrading.adoc index 6dc788a..a556123 100644 --- a/src/main/asciidoc/_chapters/upgrading.adoc +++ b/src/main/asciidoc/_chapters/upgrading.adoc @@ -611,6 +611,19 @@ Performance is also an area that is now under active review so look forward to improvement in coming releases (See link:https://issues.apache.org/jira/browse/HBASE-20188[HBASE-20188 TESTING Performance]). +[[upgrade2.0.it.kerberos]] +.Integration Tests and Kerberos +Integration Tests (`IntegrationTests*`) used to rely on the Kerberos credential cache +for authentication against secured clusters. This used to lead to tests failing due +to authentication failures when the tickets in the credential cache expired. +As of hbase-2.0.0 (and hbase-1.3.0+), the integration test clients will make use +of the configuration properties `hbase.client.keytab.file` and +`hbase.client.kerberos.principal`. They are required. The clients will perform a +login from the configured keytab file and automatically refresh the credentials +in the background for the process lifetime (See +link:https://issues.apache.org/jira/browse/HBASE-16231[HBASE-16231]). + + //// This would be a good place to link to an appendix on migrating applications //// @@ -731,6 +744,11 @@ Notes: Doing a raw scan will now return results that have expired according to TTL settings. +[[upgrade1.3]] +=== Upgrading from pre-1.3 to 1.3+ +If running Integration Tests under Kerberos, see <<upgrade2.0.it.kerberos>>. + + [[upgrade1.0]] === Upgrading to 1.x
