-
Notifications
You must be signed in to change notification settings - Fork 9.2k
HDDS-1255. Refactor ozone acceptance test to allow run in secure mode. Contributed by Ajay Kumar. #632
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
💔 -1 overall
This message was automatically generated. |
|
+1, pending nightly run results. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What is the goal of this file? Based on the name it's not clear for me.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh, I got it. I think you assume it's always executed before all the tests. I would use a generic test initialization file:
http://robotframework.org/robotframework/latest/RobotFrameworkUserGuide.html#initialization-files
and a 'Suite Setup'. Kinit can be executed in case of the SECURITY_ENABLED is set. An other init file can be added to the s3 directory to initialize the s3 credentials.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not clear why these keywords are moved to the commonlib. Is there any reason for that?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This can be used inside security robot tests as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we need to install aws cli for all the tests? I think most of the time "Kinit test user" is enough
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
currently it used to setup aws secure credentials.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you are right, moved s3 part to s3 commonlib.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
NIT: can be more clean to use two different test case:
- Create volume bucket with wrong credentials
- Create volume bucket
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
|
💔 -1 overall
This message was automatically generated. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
shall we move this to commonawslib.robot?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
|
💔 -1 overall
This message was automatically generated. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
dup line 18 can be removed.
|
💔 -1 overall
This message was automatically generated. |
|
I am trying to test it but it's still failing. For example: |
|
I also noticed a lot of security related exceptions: |
|
You need to configure the service level authorization in hadoop-policy.xml when hadoop.security.authorization is true. Try setting hadoop.security.authorization = false to see if you can get the authentication part verified first. Then add individual rules in hadoop-policy.xml with hadoop.security.authorization=true. |
…. Contributed by Ajay Kumar.
|
💔 -1 overall
This message was automatically generated. |
| Library String | ||
| Library BuiltIn | ||
|
|
||
| *** Variables *** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
| ${output} = Execute aws s3api --endpoint-url ${ENDPOINT_URL} list-buckets | ||
| Should contain ${output} bucket-test123 | ||
|
|
||
| Secure S3 test Failure |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
| if [ "${COMPOSE_DIR}" == "ozonesecure" ]; then | ||
| SECURITY_ENABLED="true" | ||
| else | ||
| SECURITY_ENABLED="false" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
|
💔 -1 overall
This message was automatically generated. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
|
💔 -1 overall
This message was automatically generated. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
|
💔 -1 overall
This message was automatically generated. |
| Library String | ||
| Library BuiltIn | ||
|
|
||
| *** Variables *** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
| ${output} = Execute aws s3api --endpoint-url ${ENDPOINT_URL} list-buckets | ||
| Should contain ${output} bucket-test123 | ||
|
|
||
| Secure S3 test Failure |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
| SECURITY_ENABLED="true" | ||
| else | ||
| SECURITY_ENABLED="false" | ||
| fi |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
whitespace:tabs in line
|
💔 -1 overall
This message was automatically generated. |
|
Thanks the update @ajayydv. +1 if jenkins is passed... |
|
💔 -1 overall
This message was automatically generated. |
elek
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1. Last CI is passed. Thanks the continuous update @ajayydv
I am merging it right now...
…ests. Author: Shanthoosh Venkataraman <[email protected]> Author: Shanthoosh Venkataraman <[email protected]> Reviewers: Jagadish<[email protected]>, Boris Shkolnik<[email protected]> Closes apache#632 from shanthoosh/fix_zk_crap
No description provided.