[ 
https://issues.apache.org/jira/browse/KUDU-3781?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18084419#comment-18084419
 ] 

ASF subversion and git services commented on KUDU-3781:
-------------------------------------------------------

Commit 60ded710ed6f5f4abff063ca63516e05079ddaac in kudu's branch 
refs/heads/master from Zoltan Chovan
[ https://gitbox.apache.org/repos/asf?p=kudu.git;h=60ded710e ]

KUDU-3781: Add TLS support to MiniHms

This change adds the functionality of generating a PKCS12 keystore for
the MiniHms when TLS is enabled and wires the generated keystore into
the HMS configuration.

Added a very simple test for sanity checking, to confirm that the
HMS configs are properly generated, this should be replaced by a more
detailed test, when the HMS client TLS support is added.

Additionally, ExternalMiniClusterOptions and ExternalMiniCluster were
extended to support the added functionality.

Change-Id: I8fca647fd900fafc6d737c93a4af4565631839b7
Reviewed-on: http://gerrit.cloudera.org:8080/24374
Reviewed-by: Alexey Serbin <[email protected]>
Tested-by: Alexey Serbin <[email protected]>


> Add TLS transport option for Thrift client used to communicate with HMS 
> catalog
> -------------------------------------------------------------------------------
>
>                 Key: KUDU-3781
>                 URL: https://issues.apache.org/jira/browse/KUDU-3781
>             Project: Kudu
>          Issue Type: Improvement
>            Reporter: Alexey Serbin
>            Assignee: Alexey Serbin
>            Priority: Major
>
> As of time of writing, the Thrift client that Kudu masters use to communicate 
> with HMS catalog doesn't support TLS transport.
> The HMS catalog allows for configuring TLS protection for connections to HMS 
> clients speaking the Apache Thrift protocol.  From the Kudu side, it's 
> necessary to add TLS transport support to the HMS catalog client used by Kudu 
> masters.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to