## What is the purpose of the change
This PR introduces SSL support for the Queryable State client/proxy/server.
Note that the communication is considered 'internal' and thus relies on the
`security.ssl.internal` flags.
## Brief change log
- move SSLEngineFactory, SSLUtils, and SSLUtilsTest from flink-runtime to
flink-core to be used by flink-queryable-state-client-java
- implement SSL for queryable state client, proxy, and server
- define configuration parameter `query.ssl.enabled ` to enable/disable SSL
- update documentation
- refactor `TestMessage` class for reuse
## Verifying this change
This change added tests and can be verified as follows:
- *Added tests for client-server communication over SSL*
- *Manually verified the change by running a cluster with 1 JobManagers and 2
TaskManagers, with all possible combinations of enable/disable.
## Does this pull request potentially affect one of the following parts:
- Dependencies (does it add or upgrade a dependency): no
- The public API, i.e., is any changed class annotated with
`@Public(Evolving)`: no
- The serializers: no
- The runtime per-record code paths (performance sensitive): no
- Anything that affects deployment or recovery: JobManager (and its
components), Checkpointing, Yarn/Mesos, ZooKeeper: no
- The S3 file system connector: no
## Documentation
- Does this pull request introduce a new feature? yes
- If yes, how is the feature documented? docs
[ Full content available at: https://github.com/apache/flink/pull/6626 ]
This message was relayed via gitbox.apache.org for [email protected]
