Skip to content

Commit 1445638

Browse files
authored
Adding config so that some tests will break if over-the-wire encryption fails (#78409)
Until recently, if a user configured over-the-wire encryption for repository-hdfs they would get an exception. That was fixed in an upgraded ticket in two ways: (1) jvm permissions were opened up for haddop2, and (2) support for the hadoop 3 hdfs client was added. This commit adds configuration to a couple of integration tests so that they fail if over-the-wire encryption is not working. Relates #76897 #76734
1 parent 248b229 commit 1445638

File tree

3 files changed

+3
-0
lines changed

3 files changed

+3
-0
lines changed

plugins/repository-hdfs/src/test/resources/rest-api-spec/test/secure_hdfs_repository/20_repository_create.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@
1414
path: "/user/elasticsearch/test/repository_create"
1515
security:
1616
principal: "[email protected]"
17+
conf.dfs.encrypt.data.transfer.cipher.suites: "AES/CTR/NoPadding"
1718

1819
# Get repository
1920
- do:

plugins/repository-hdfs/src/test/resources/rest-api-spec/test/secure_hdfs_repository/30_snapshot.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@
1515
path: "/user/elasticsearch/test/snapshot"
1616
security:
1717
principal: "[email protected]"
18+
conf.dfs.encrypt.data.transfer.cipher.suites: "AES/CTR/NoPadding"
1819

1920
# Create index
2021
- do:

test/fixtures/hdfs2-fixture/src/main/java/hdfs/MiniHDFS.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -84,6 +84,7 @@ public static void main(String[] args) throws Exception {
8484
cfg.set(DFSConfigKeys.DFS_BLOCK_ACCESS_TOKEN_ENABLE_KEY, "true");
8585
cfg.set(DFSConfigKeys.IGNORE_SECURE_PORTS_FOR_TESTING_KEY, "true");
8686
cfg.set(DFSConfigKeys.DFS_ENCRYPT_DATA_TRANSFER_KEY, "true");
87+
cfg.set(DFSConfigKeys.DFS_ENCRYPT_DATA_TRANSFER_CIPHER_SUITES_KEY, "AES/CTR/NoPadding");
8788
}
8889

8990
UserGroupInformation.setConfiguration(cfg);

0 commit comments

Comments
 (0)