[
https://issues.apache.org/jira/browse/KAFKA-2581?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14933156#comment-14933156
]
Rajini Sivaram commented on KAFKA-2581:
---------------------------------------
[~ewencp] [~ijuma] Thank you for the input.
We would ideally like to run all of the tests with SSL, but I can understand
that as the number of tests grows, running every single test with PLAINTEXT and
SSL would become impractical. We have an automated build which runs system
tests when we take new code from Kafka. What we would really like is to run all
system tests in the configuration we will be using (PLAINTEXT replication,
SSL+SASL producers and consumers). If security config for all services are
defined in template properties, we can override template properties to our
config before we run the tests in our build. And that would be of great help to
us.
In addition to that, as Ismael says, a large subset of existing tests including
benchmark and replication tests would benefit from being run with both
PLAINTEXT and SSL since the current tests for SSL dont really cover the type of
complex scenarios that system tests cover. Parameterizing a subset of tests
will be useful for that (the subset would include most of the tests that are
currently implemented, but maybe a smaller percentage of new tests) .
How about:
# Parameterize tests which would benefit from being run with multiple security
protocols. These tests will run with each of the specified protocols.
# Modify all services to use security properties specified in their template
property files as default. This would be PLAINTEXT by default, but will enable
all tests to be run with SSL/SASL etc if required.
Thoughts?
> Run all existing ducktape tests with SSL-enabled clients and brokers
> --------------------------------------------------------------------
>
> Key: KAFKA-2581
> URL: https://issues.apache.org/jira/browse/KAFKA-2581
> Project: Kafka
> Issue Type: Sub-task
> Components: security
> Affects Versions: 0.9.0.0
> Reporter: Rajini Sivaram
> Assignee: Rajini Sivaram
> Fix For: 0.9.0.0
>
>
> New ducktape tests for testing SSL are being added under KAFKA-2417. This
> task will enable existing ducktape tests to be run with SSL-enabled brokers
> and clients.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
