[ 
https://issues.apache.org/jira/browse/HDDS-5123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

ASF GitHub Bot updated HDDS-5123:
---------------------------------
    Labels: pull-request-available  (was: )

> Use the pre-created apache/ozone-testkrb5 image during secure acceptance tests
> ------------------------------------------------------------------------------
>
>                 Key: HDDS-5123
>                 URL: https://issues.apache.org/jira/browse/HDDS-5123
>             Project: Apache Ozone
>          Issue Type: Improvement
>            Reporter: Marton Elek
>            Assignee: Marton Elek
>            Priority: Major
>              Labels: pull-request-available
>
> Today ozonesecure compose clusters (and ozonesecure-ha and ozonesecure-mr) 
> use an adhoc keytab issuer. The issuer is download during the image creation 
> and uses a third party go lang application to create the keytabs on-demand.
> As discussed earlier, it would be faster to use a dedicated, pre-built 
> container image which includes the pre-created keytabs instead of issuing 
> them on-the fly (keytab generation is slow + container creation is slow)
> For each of the tagged images we can export to current keytabs to 
> hadoop-ozone/dist/src/main/compose/ which can be mounted to to compose 
> clusters.
> It makes the overall acceptance test faster (instead of creating keytab, 
> which is quite slow, we can start the cluster immediately). And we don't need 
> to depend on an external utility app.
> Pre-created keytabs are also more similar to production environment...
> First test using the apache/ozone-testkrb5 from HDDS-4938
> The time between starting test.sh script and first robot test:
> master: 3:30 (01:43:08 --01:46:38)
> this patch: 2:10 (12:59:29 13:02:39)
> (note: there are some variances between different builds, and in general the 
> patch build was a slower one. It can be even faster).
> ~



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to