dombizita opened a new pull request, #6194: URL: https://github.com/apache/hadoop/pull/6194
### Description of PR Previously in #5638 there were methods added to ZKCuratorManager, where we are setting the SSL configuration in a ZKClientConfig if SSL is enabled for ZK. I moved this to SecurityUtil and use it to construct the same for HDFS. HDFS is creating ZooKeeper instance in ZKFC, where it is not using ZKCuratorManager. I added HDFS configuration key called `dfs.ha.zkfc.client.ssl.enabled`, which is storing the enablement of SSL in ZKFC. If it is enabled, we are creating a TruststoreKeystore and give it to ActiveStandbyElector during initialisation and later set the SSL configs there, so the ZooKeeper will be created correctly. ### How was this patch tested? I added unit tests, which are checking if we are creating a ZK with/without TruststoreKeystore it is setting the truststore/keystore location and password accordingly in the ZKClientConfig. ### For code changes: - [x] Does the title or this PR starts with the corresponding JIRA issue id (e.g. 'HADOOP-17799. Your PR title ...')? - [ ] Object storage: have the integration tests been executed and the endpoint declared according to the connector-specific documentation? - [ ] If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under [ASF 2.0](http://www.apache.org/legal/resolved.html#category-a)? - [ ] If applicable, have you updated the `LICENSE`, `LICENSE-binary`, `NOTICE-binary` files? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org
