Anubhav Jindal has uploaded this change for review. ( http://gerrit.cloudera.org:8080/24367
Change subject: IMPALA-15017: Add secure-cluster Helm configuration support ...................................................................... IMPALA-15017: Add secure-cluster Helm configuration support Add structured security values for Istio sidecar injection, Kerberos flags/keytab inputs, and TLS certificate inputs in the Impala Helm chart. Wire secure options into impalad/catalogd/statestored startup args and secret/config mounts behind opt-in flags, and document required secure cluster inputs and usage in the Kubernetes deployment guide. Testing: - helm lint helm/impala - helm template impala-default helm/impala -f helm/impala/values-example.yaml - helm template impala-secure helm/impala -f helm/impala/values-example.yaml \ --set security.kerberos.enabled=true \ --set security.kerberos.principal='impala/[email protected]' \ --set security.kerberos.bePrincipal='impala/[email protected]' \ --set security.kerberos.keytabSecretName='impala-kerberos-keytab' \ --set security.kerberos.krb5ConfigMapName='impala-krb5-conf' \ --set security.tls.enabled=true \ --set security.tls.secretName='impala-tls' \ --set security.istio.enabled=true - helm template impala-sec-missing helm/impala \ -f helm/impala/values-example.yaml --set security.kerberos.enabled=true (fails with required keytabSecretName error) - Deployed non-secure compatibility release on Kubernetes test cluster using KUBECONFIG and verified all core pods were Running. - Ran impala-shell smoke queries: select version(); select 1; Change-Id: I02e4c4b466424a938151bd69b28bf99ae405fae7 Generated-by: Cursor --- M docs/impala-on-kubernetes.md M helm/impala/templates/catalogd-deployment.yaml M helm/impala/templates/hms-deployment.yaml M helm/impala/templates/impalad-deployment.yaml M helm/impala/templates/kudu-master-deployment.yaml M helm/impala/templates/kudu-tserver-deployment.yaml M helm/impala/templates/ranger-deployment.yaml M helm/impala/templates/statestored-deployment.yaml M helm/impala/values-example.yaml M helm/impala/values.yaml 10 files changed, 316 insertions(+), 0 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/67/24367/1 -- To view, visit http://gerrit.cloudera.org:8080/24367 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I02e4c4b466424a938151bd69b28bf99ae405fae7 Gerrit-Change-Number: 24367 Gerrit-PatchSet: 1 Gerrit-Owner: Anubhav Jindal <[email protected]>
