nileshrathi345 opened a new pull request, #532: URL: https://github.com/apache/livy/pull/532
## What changes were proposed in this pull request? Resolves Hive Metastore SSL credential handling for Spark sessions/jobs submitted by Livy. - Added `enrichHiveMetastoreSslConf` in `SparkApp.prepareSparkConf` to read `hive.metastore.keystore.password` and `hive.metastore.truststore.password` from Livy’s local credential provider (`livy.hadoop.security.credential.provider.path`) and inject them as `spark.hadoop.*` properties for the Spark app. - Ensures YARN/K8s driver and executors get explicit HMS SSL passwords without needing access to the Livy host’s local JCEKS file. - Preserves the existing credential provider path in Spark conf (fix for interactive session creation regression from blanking the path). ## How was this patch tested? - Added SparkAppSpec unit tests for no-op, successful HMS SSL resolution, unrelated credentials, and unreadable provider path cases. - Verified credential resolution from a local JCEKS test store and no-op paths when provider is missing, unreadable, or has no HMS aliases. ## Was this patch authored or co-authored using generative AI tooling? No -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
