diff options
| author | Jacek Lewandowski <lewandowski.jacek@gmail.com> | 2015-02-02 17:18:54 -0800 |
|---|---|---|
| committer | Josh Rosen <joshrosen@databricks.com> | 2015-02-02 17:27:26 -0800 |
| commit | cfea30037ff4ac7e386a1478e7dce07ca3bb9072 (patch) | |
| tree | da4acef82b34fde0536695e53669b16b32ff2889 /core/src/test/resources | |
| parent | ef65cf09b04f915ab463a6d3bac12795318897f2 (diff) | |
| download | spark-cfea30037ff4ac7e386a1478e7dce07ca3bb9072.tar.gz spark-cfea30037ff4ac7e386a1478e7dce07ca3bb9072.tar.bz2 spark-cfea30037ff4ac7e386a1478e7dce07ca3bb9072.zip | |
Spark 3883: SSL support for HttpServer and Akka
SPARK-3883: SSL support for Akka connections and Jetty based file servers.
This story introduced the following changes:
- Introduced SSLOptions object which holds the SSL configuration and can build the appropriate configuration for Akka or Jetty. SSLOptions can be created by parsing SparkConf entries at a specified namespace.
- SSLOptions is created and kept by SecurityManager
- All Akka actor address creation snippets based on interpolated strings were replaced by a dedicated methods from AkkaUtils. Those methods select the proper Akka protocol - whether akka.tcp or akka.ssl.tcp
- Added tests cases for AkkaUtils, FileServer, SSLOptions and SecurityManager
- Added a way to use node local SSL configuration by executors and driver in standalone mode. It can be done by specifying spark.ssl.useNodeLocalConf in SparkConf.
- Made CoarseGrainedExecutorBackend not overwrite the settings which are executor startup configuration - they are passed anyway from Worker
Refer to https://github.com/apache/spark/pull/3571 for discussion and details
Author: Jacek Lewandowski <lewandowski.jacek@gmail.com>
Author: Jacek Lewandowski <jacek.lewandowski@datastax.com>
Closes #3571 from jacek-lewandowski/SPARK-3883-master and squashes the following commits:
9ef4ed1 [Jacek Lewandowski] Merge pull request #2 from jacek-lewandowski/SPARK-3883-docs2
fb31b49 [Jacek Lewandowski] SPARK-3883: Added SSL setup documentation
2532668 [Jacek Lewandowski] SPARK-3883: Refactored AkkaUtils.protocol method to not use Try
90a8762 [Jacek Lewandowski] SPARK-3883: Refactored methods to resolve Akka address and made it possible to easily configure multiple communication layers for SSL
72b2541 [Jacek Lewandowski] SPARK-3883: A reference to the fallback SSLOptions can be provided when constructing SSLOptions
93050f4 [Jacek Lewandowski] SPARK-3883: SSL support for HttpServer and Akka
Diffstat (limited to 'core/src/test/resources')
| -rw-r--r-- | core/src/test/resources/keystore | bin | 0 -> 2247 bytes |
| -rw-r--r-- | core/src/test/resources/truststore | bin | 0 -> 957 bytes |
| -rw-r--r-- | core/src/test/resources/untrusted-keystore | bin | 0 -> 2246 bytes |
3 files changed, 0 insertions, 0 deletions
diff --git a/core/src/test/resources/keystore b/core/src/test/resources/keystore Binary files differnew file mode 100644 index 0000000000..f8310e39ba --- /dev/null +++ b/core/src/test/resources/keystore diff --git a/core/src/test/resources/truststore b/core/src/test/resources/truststore Binary files differnew file mode 100644 index 0000000000..a6b1d46e1f --- /dev/null +++ b/core/src/test/resources/truststore diff --git a/core/src/test/resources/untrusted-keystore b/core/src/test/resources/untrusted-keystore Binary files differnew file mode 100644 index 0000000000..6015b02caa --- /dev/null +++ b/core/src/test/resources/untrusted-keystore |