[
https://issues.apache.org/jira/browse/KNOX-3429?focusedWorklogId=1039055&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1039055
]
ASF GitHub Bot logged work on KNOX-3429:
----------------------------------------
Author: ASF GitHub Bot
Created on: 01/Sep/26 11:05
Start Date: 01/Sep/26 11:05
Worklog Time Spent: 10m
Work Description: github-actions[bot] commented on PR #1368:
URL: https://github.com/apache/knox/pull/1368#issuecomment-5492973780
## Test Results
4 files 4 suites 13s ⏱️
69 tests 69 ✅ 0 💤 0 ❌
80 runs 80 ✅ 0 💤 0 ❌
Results for commit c3686c26.
[test-results]:data:application/gzip;base64,H4sIAGixlmoC/12Myw6CMBBFf4V07aJYmLT+jCkDk0wEavpYEf/dQixWd/ecm5xNEM9TELemuzQiJI4njMnbyG7N2KrM+Yn7B6bAPSTEP/PgZzbyFGR5/hGT985/jE/rXtRll2Alvr2Dq9zBdQ3dsnDMIFCBBryCITPgqPXQqw7I2BEsEaJUpgeJLYnXG0VVjDgAAQAA
Issue Time Tracking
-------------------
Worklog Id: (was: 1039055)
Time Spent: 20m (was: 10m)
> knox-<version>-src.zip can balloon far beyond its expected size (~40 MB ->
> GBs) and fail to stage to the Apache dist repo.
> --------------------------------------------------------------------------------------------------------------------------
>
> Key: KNOX-3429
> URL: https://issues.apache.org/jira/browse/KNOX-3429
> Project: Apache Knox
> Issue Type: Bug
> Components: Build, Release
> Affects Versions: 3.0.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Major
> Fix For: 3.1.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> {noformat}
> ant stage-candidate fails uploading the source archive:
> svn: E175002: PUT request on
> '.../dev/knox/knox-<version>/knox-<version>-src.zip' failed
> The PUT is rejected because the source zip is oversized.
> {noformat}
> *Root cause:* {{src/assembly.xml}} includes {{**}} from the repo root and
> subtracts only a short exclude list ({{target, node_modules, IDE files}}).
> The assembly snapshots the working tree at end-of-build, so anything else
> present gets bundled: Angular caches (.angular), runtime state generated by
> running the gateway/tests outside target/ (data/security keystores,
> data/ldap-server, data/deployments, logs, *.pid), JVM crash/heap dumps, and
> the {{candidate/}} staging dir (which re-bundles a previous *-src.zip).
> Shipping generated {{keystores/credentials}} in a source release is also a
> hygiene issue. A clean checkout builds correctly, so the logic is sound - the
> descriptor just isn't robust to leftover artifacts.
> *Fix:* Add scoped excludes to src/assembly.xml:
> {noformat}
> **/.angular/**, **/.scannerwork/**, candidate/**,
> **/data/{security,deployments,ldap-server}/**, **/logs/*.{log,out,err},
> **/*.pid, **/*.hprof, **/hs_err_pid*.log, **/replay_pid*.log. Patterns kept
> narrow and verified via git ls-files to drop no tracked source (preserving
> home/data/**/README, home/logs/.gitignore, sample .log).
> {noformat}
> *Acceptance Criteria*
> - Source zip stays ~40 MB even when built from a tree with runtime state /
> populated candidate/.
> - No generated keystores/credentials in the archive; no legitimate tracked
> files dropped.
> - ant stage-candidate uploads successfully.
> *Note*
> Excludes are a safety net - staging from a clean checkout remains the
> recommended practice.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
