Hello Impala Public Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/24367
to look at the new patch set (#19).
Change subject: IMPALA-15017: Add secure-cluster Helm options
......................................................................
IMPALA-15017: Add secure-cluster Helm options
Add structured security values for Istio sidecar injection, Kerberos
flags/keytab inputs, and TLS certificate inputs in the Impala Helm chart.
Wire secure options into impalad/catalogd/statestored startup args and
secret/config mounts behind opt-in flags, and document required secure
cluster inputs and usage in the Kubernetes deployment guide.
Testing:
- helm lint helm/impala
- helm template impala-default helm/impala -f helm/impala/values-example.yaml
- helm template impala-secure helm/impala -f helm/impala/values-example.yaml \
--set security.kerberos.enabled=true \
--set security.kerberos.principal='impala/[email protected]' \
--set security.kerberos.bePrincipal='impala/[email protected]' \
--set security.kerberos.keytabSecretName='impala-kerberos-keytab' \
--set security.kerberos.krb5ConfigMapName='impala-krb5-conf' \
--set security.tls.enabled=true \
--set security.tls.secretName='impala-tls' \
--set security.istio.enabled=true
- helm template impala-sec-missing helm/impala \
-f helm/impala/values-example.yaml --set security.kerberos.enabled=true
(fails with required keytabSecretName error)
- Deployed non-secure compatibility release on Kubernetes test cluster
using KUBECONFIG and verified all core pods were Running.
- Ran impala-shell smoke queries: select version(); select 1;
Implemented and validated manually; Cursor-assisted.
Generated-by: Cursor (GPT-5.3)
Change-Id: I02e4c4b466424a938151bd69b28bf99ae405fae7
Co-authored-by: Cursor <[email protected]>
---
M docs/impala-on-kubernetes.md
M helm/impala/templates/catalogd-deployment.yaml
M helm/impala/templates/hms-deployment.yaml
M helm/impala/templates/impalad-deployment.yaml
M helm/impala/templates/kudu-master-deployment.yaml
M helm/impala/templates/kudu-tserver-deployment.yaml
M helm/impala/templates/ranger-deployment.yaml
M helm/impala/templates/statestored-deployment.yaml
M helm/impala/values-example.yaml
M helm/impala/values.yaml
10 files changed, 316 insertions(+), 0 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/67/24367/19
--
To view, visit http://gerrit.cloudera.org:8080/24367
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I02e4c4b466424a938151bd69b28bf99ae405fae7
Gerrit-Change-Number: 24367
Gerrit-PatchSet: 19
Gerrit-Owner: Anubhav Jindal <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
