[
https://issues.apache.org/jira/browse/KNOX-3398?focusedWorklogId=1032561&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1032561
]
ASF GitHub Bot logged work on KNOX-3398:
----------------------------------------
Author: ASF GitHub Bot
Created on: 28/Jul/26 10:59
Start Date: 28/Jul/26 10:59
Worklog Time Spent: 10m
Work Description: smolnar82 opened a new pull request, #1330:
URL: https://github.com/apache/knox/pull/1330
[KNOX-3398](https://issues.apache.org/jira/browse/KNOX-3398) - Enable
Iceberg REST catalog SSL only when ENCRYPT_ALL_PORTS is set
## What changes were proposed in this pull request?
The Iceberg REST catalog URL now uses https only when HMS SSL
(`hive_metastore_enable_ssl`) is enabled and the `ENCRYPT_ALL_PORTS` env var is
set. The raw `HMS SSL flag` and the new `ENCRYPT_ALL_PORTS` flag are exposed as
separate service properties.
## How was this patch tested?
Unit tests in `IcebergRestServiceModelGeneratorTest`- parameterized over
both `ENCRYPT_ALL_PORTS` states, asserting the resulting scheme (http/https),
URL, and service properties.
## Integration Tests
N/A
## UI changes
N/A
Issue Time Tracking
-------------------
Worklog Id: (was: 1032561)
Remaining Estimate: 0h
Time Spent: 10m
> Iceberg REST catalog CM service discovery should consider ENCRYPT_ALL_PORTS
> ENV variable when setting up scheme
> ---------------------------------------------------------------------------------------------------------------
>
> Key: KNOX-3398
> URL: https://issues.apache.org/jira/browse/KNOX-3398
> Project: Apache Knox
> Issue Type: Improvement
> Components: Server
> Affects Versions: 3.0.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Critical
> Fix For: 3.0.0
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> KNOX-3380 fixed the issue of using the wrong SSL-enabled flag for the
> ICEBERG-REST service during CM service discovery.
> However, this is not the only check we have to make. SSL enabled should be
> tuned on for this service if that flag (hive_metastore_enable_ssl) is set to
> {{true}} +AND+ the value of {{ENCRYPT_ALL_PORTS}} environment variable is
> also {{true}} (defaults to {{{}false{}}}).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
