Jason Fehr has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/24367 )
Change subject: IMPALA-15017: Add secure-cluster Helm options ...................................................................... IMPALA-15017: Add secure-cluster Helm options Add structured security values for Istio sidecar injection, Kerberos flags/keytab inputs, and TLS certificate inputs in the Impala Helm chart. Wire secure options into impalad/catalogd/statestored startup args and secret/config mounts behind opt-in flags, and document required secure cluster inputs and usage in the Kubernetes deployment guide. Testing: - helm lint helm/impala - helm template impala-default helm/impala -f helm/impala/values-example.yaml - helm template impala-secure helm/impala -f helm/impala/values-example.yaml \ --set security.kerberos.enabled=true \ --set security.kerberos.principal='impala/[email protected]' \ --set security.kerberos.bePrincipal='impala/[email protected]' \ --set security.kerberos.keytabSecretName='impala-kerberos-keytab' \ --set security.kerberos.krb5ConfigMapName='impala-krb5-conf' \ --set security.tls.enabled=true \ --set security.tls.secretName='impala-tls' \ --set security.istio.enabled=true - helm template impala-sec-missing helm/impala \ -f helm/impala/values-example.yaml --set security.kerberos.enabled=true (fails with required keytabSecretName error) - Deployed non-secure compatibility release on Kubernetes test cluster using KUBECONFIG and verified all core pods were Running. - Ran impala-shell smoke queries: select version(); select 1; Change-Id: I02e4c4b466424a938151bd69b28bf99ae405fae7 Assisted-by: GPT-5.3 (Cursor) Reviewed-on: http://gerrit.cloudera.org:8080/24367 Reviewed-by: Jason Fehr <[email protected]> Tested-by: Jason Fehr <[email protected]> --- M helm/impala/README.md M helm/impala/templates/catalogd-deployment.yaml M helm/impala/templates/hms-deployment.yaml M helm/impala/templates/impalad-deployment.yaml M helm/impala/templates/kudu-master-deployment.yaml M helm/impala/templates/kudu-tserver-deployment.yaml M helm/impala/templates/ranger-deployment.yaml M helm/impala/templates/statestored-deployment.yaml M helm/impala/values-example.yaml M helm/impala/values.yaml 10 files changed, 327 insertions(+), 0 deletions(-) Approvals: Jason Fehr: Looks good to me, approved; Verified -- To view, visit http://gerrit.cloudera.org:8080/24367 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I02e4c4b466424a938151bd69b28bf99ae405fae7 Gerrit-Change-Number: 24367 Gerrit-PatchSet: 49 Gerrit-Owner: Anubhav Jindal <[email protected]> Gerrit-Reviewer: Abhishek Rawat <[email protected]> Gerrit-Reviewer: Anubhav Jindal <[email protected]> Gerrit-Reviewer: Gokul Kolady <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Jason Fehr <[email protected]>
