Skip to content

KNOX-3380: hive_metastore_enable_ssl config should be used to determine if SSL is enabled on HMS#1307

Merged
smolnar82 merged 1 commit into
apache:masterfrom
smolnar82:KNOX-3380
Jul 15, 2026
Merged

KNOX-3380: hive_metastore_enable_ssl config should be used to determine if SSL is enabled on HMS#1307
smolnar82 merged 1 commit into
apache:masterfrom
smolnar82:KNOX-3380

Conversation

@smolnar82

Copy link
Copy Markdown
Contributor

KNOX-3380 - Using the correct HMS service-level config to determine of SSL is enabled on HMS

What changes were proposed in this pull request?

Checking hive_metastore_enable_ssl instead of hiveserver2_enable_ssl when discovering ICEBERG-REST in Cloudera Manager.

How was this patch tested?

Manually on a live CM cluster:

SSL disabled:

# grep -A 3 -B 1 "<role>ICEBERG-REST</role>" /var/lib/knox/gateway/conf/topologies/iceberg-rest-topology.xml
    <service>
        <role>ICEBERG-REST</role>
        <url>http://MY_ICEBERG_REST_HOST1:8090/icecli</url>
        <url>http://MY_ICEBERG_REST_HOST2:8090/icecli</url>
    </service>

SSL enabled:

# grep -A 3 -B 1 "<role>ICEBERG-REST</role>" /var/lib/knox/gateway/conf/topologies/iceberg-rest-topology.xml
    <service>
        <role>ICEBERG-REST</role>
        <url>MY_ICEBERG_REST_HOST1:8090/icecli</url>
        <url>MY_ICEBERG_REST_HOST2:8090/icecli</url>
    </service>

Integration Tests

N/A

UI changes

N/A

@github-actions

Copy link
Copy Markdown

Test Results

36 tests   36 ✅  6s ⏱️
 3 suites   0 💤
 3 files     0 ❌

Results for commit b0156a2.

@smolnar82
smolnar82 merged commit 8d70ff4 into apache:master Jul 15, 2026
3 checks passed
@smolnar82
smolnar82 deleted the KNOX-3380 branch July 15, 2026 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant