Siyao Meng created HDDS-16971:
---------------------------------
Summary: Add a secure IPv6-only acceptance smoke test
Key: HDDS-16971
URL: https://issues.apache.org/jira/browse/HDDS-16971
Project: Apache Ozone
Issue Type: Sub-task
Components: docker-compose, test
Reporter: Siyao Meng
Assignee: Siyao Meng
HDDS-16969 added an IPv6-only smoke test for a non-secure cluster. This adds
the same for a Kerberos cluster.
Add {{ipv6.yaml}} and {{test-ipv6.sh}} (suite HA-secure) to the
{{ozonesecure-ha}} compose environment. The override replaces the static IPv4
addresses with an IPv6-only network. Principals and service addresses stay on
DNS names. Recon and S3 Gateway use {{_HOST}} principals with the HTTP bind
host set to {{::}}, which needs HDDS-16347.
The test runs {{ipv6/ipv6.robot}} (extended for secure mode, with a SPNEGO
check), the delegation token suite, ozone shell, ofs, S3 with secrets, HttpFS,
the admin CLI and OM leader transfer.
Two workarounds in the override should be removed once the cause is fixed:
* {{hdds.datanode.use.datanode.hostname=true}}, because certificates do not
include IPv6 addresses (HDDS-16970).
* {{HADOOP_OPTS}} for the KMS container, because Hadoop sets
{{-Djava.net.preferIPv4Stack=true}} by default.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
