[
https://issues.apache.org/jira/browse/IMPALA-11198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17511934#comment-17511934
]
ASF subversion and git services commented on IMPALA-11198:
----------------------------------------------------------
Commit b694901414b05d4f7696b424507e253f07d0a182 in impala's branch
refs/heads/master from Joe McDonnell
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=b694901 ]
IMPALA-11198: Exclude aws-java-sdk-bundle coming from Ranger audit
Ranger started pulling in aws-java-sdk-bundle. Impala uses a
stripped down version of this jar (impala-minimal-s3a-aws-sdk)
to save space and we don't need aws-java-sdk-bundle. This adds
an exclusion to ranger-plugins-audit to avoid this dependency.
Testing:
- Ran core tests
Change-Id: Ia60601e9f21661f62a6c261e547f67a26e0400d0
Reviewed-on: http://gerrit.cloudera.org:8080/18349
Tested-by: Impala Public Jenkins <[email protected]>
Reviewed-by: Csaba Ringhofer <[email protected]>
> Exclude aws-java-sdk-bundle from ranger-plugins-audit
> -----------------------------------------------------
>
> Key: IMPALA-11198
> URL: https://issues.apache.org/jira/browse/IMPALA-11198
> Project: IMPALA
> Issue Type: Task
> Components: Infrastructure
> Reporter: Joe McDonnell
> Priority: Major
>
> ranger-plugins-audit is pulling in its own copy of aws-java-sdk-bundle. This
> should be excluded, as we want the aws dependencies to use our
> impala-minimal-s3a-aws-sdk, which is much smaller.
> This also avoids any CVEs associated with that version of aws-java-sdk-bundle.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
