| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
|
I wish there was a way NOT to provide your own scylla.yaml, but merge your defaults with the default scylla.yaml - the end result is that you might be missing some new defaults if you bring your own scylla.yaml. |
Sorry, something went wrong.
fix typos in docs Co-authored-by: Yaniv Kaul <yaniv.kaul@scylladb.com>
This looks like a separate feature for merging config files. Usually what I used to see in a majority of the applications is that you are using the default config file and overriding it with ENVs or flags or providing your own config file. Providing own config file which will still be merged with some default looks like implicit behavior which in my opinion will confuse users. WDYT? |
Sorry, something went wrong.
|
Any updates on merging this? |
Sorry, something went wrong.
Yes, my ask is exactly this - let's use the default Scylla YAML that comes with Scylla, and allow overriding values in it. |
Sorry, something went wrong.
| this.enableJmxReporting = false; | ||
|
|
||
| withEnv("CASSANDRA_SNITCH", "GossipingPropertyFileSnitch"); | ||
| withEnv("JVM_OPTS", "-Dcassandra.skip_wait_for_gossip_to_settle=0 -Dcassandra.initial_token=0"); |
There was a problem hiding this comment.
those are not relevant to scylla, you need commandline option for skip_wait_for_gossip_to_settle
Sorry, something went wrong.
| addExposedPort(CQL_PORT); | ||
| this.enableJmxReporting = false; | ||
|
|
||
| withEnv("CASSANDRA_SNITCH", "GossipingPropertyFileSnitch"); |
There was a problem hiding this comment.
I think this needs to be checked, scylla docker doesn't use this variable
Sorry, something went wrong.
|
Hello folks. Any updates on this one ? ;) |
Sorry, something went wrong.
|
Hi, I'll review the PR once the other comments have been addressed. It is great seeing Scylla team reviewing the PR. |
Sorry, something went wrong.
hopefully it won't be dragged like it's counterpart: |
Sorry, something went wrong.
|
@fruch LMK once this is ready to review and will do it as soon as possible. I still see some comments that hasn't been resolved. So, that's the reason why I haven't reviewed yet. |
Sorry, something went wrong.
|
Hi, I know this is still in progress because I see some comments unresolved. But, JFTR it would be nice to add an integration test enabling ssl and add it to the docs. |
Sorry, something went wrong.
|
I'm updating the PR based on testcontainers/testcontainers-go#2919 |
Sorry, something went wrong.
|
Hi @mykaul, I've looked into implementing your suggestion, and it seems there are a few challenges with achieving this functionality:
While this method works, it feels like a bit of a hack to me, and I’m not entirely comfortable with introducing such a workaround into the workflow.
Given these constraints, do you have other suggestions for achieving this functionality? Specifically, how can we ensure the availability of an up-to-date configuration file while maintaining simplicity and compatibility with the existing workflow? Looking forward to your thoughts! |
Sorry, something went wrong.
|
@eddumelendez Hey, thanks for stepping in and polishing PR. Just asking, why you removed custom config file related changes? |
Sorry, something went wrong.
|
@mkorolyov - thanks for looking into this. I think your point no. 1 makes a convincing argument - it's trivial to just pass a yaml file, it's quite standard, so anyone using the Scylla testcontainer can do it. Let's just document it. |
Sorry, something went wrong.
|
@mykaul Hey, added possibility to easily replace config file for test container and documented it. @eddumelendez Hey, added ssl integration test and documented it. Could you pls take a look so we could proceed with it? Appreciate your help and time! |
Sorry, something went wrong.
| } | ||
|
|
||
| @Test | ||
| public void testSslConfiguration() { |
There was a problem hiding this comment.
@mkorolyov this test fails. Lacking ssl configuration? default image doesn't provide those env vars
Sorry, something went wrong.
There was a problem hiding this comment.
it was committed by mistake. cleaned that up, thanks!
Sorry, something went wrong.
| } | ||
|
|
||
| @Test | ||
| public void testSimpleSsl() |
There was a problem hiding this comment.
Thanks for adding this! I think cql cli command would not work unless is configured properly. We should configure it properly when ssl is enabled https://opensource.docs.scylladb.com/stable/operating-scylla/security/gen-cqlsh-file.html
Sorry, something went wrong.
There was a problem hiding this comment.
@eddumelendez yes, if ssl enabled on the server for client connections in order to cqlsh to work we need to configure ssl for it too, but it is not used here, in test containers, right? I didn't get your point, could you pls clarify what else you would like to see in this PR? thanks!
Sorry, something went wrong.
There was a problem hiding this comment.
Users can execute commands using via execInContainer method provided by Testcontainers API. Testcontainers should provide a proper configuration for the container to run properly. In this case, external clients will connect properly because the sdk client is configured but not inside the container. I think we should fix that.
Sorry, something went wrong.
There was a problem hiding this comment.
I've added a test example how to make cqlsh work with same ssl setup.
Sorry, something went wrong.
There was a problem hiding this comment.
Thanks! WDYT about adding withSsl(MountableFile certificate, MountableFile keyfile, MountableFile truststore) and copy those files as part of ScyllaDBContainer. If so, then create the cqlshrc.
ScyllaDBContainer scylladb = new ScyllaDBContainer(SCYLLADB_IMAGE)
.withConfigurationOverride("scylla-test-ssl")
.withSsl(certificate, keyfile, truststore)
Sorry, something went wrong.
There was a problem hiding this comment.
@eddumelendez Sure, added withSsl. Also used SSL_CERTFILE env variable instead of rewriting cqlshrc file as there could be issues with the connection hostname specified in the file and also it simplifies setup.
Sorry, something went wrong.
|
@eddumelendez Hey, could you please take a look? I've updated PR according to your suggestions. |
Sorry, something went wrong.
There was a problem hiding this comment.
@mkorolyov we are close. I left one more comment related to the truststore given it is optional.
Sorry, something went wrong.
| return this; | ||
| } | ||
|
|
||
| public ScyllaDBContainer withSsl(MountableFile certificate, MountableFile keyfile, MountableFile truststore) { |
There was a problem hiding this comment.
truststore is optional. See https://opensource.docs.scylladb.com/stable/operating-scylla/security/client-node-encryption.html#validate-the-clients. So, we should provide another method
withSsl(MountableFile certificate, MountableFile keyfile)
Sorry, something went wrong.
There was a problem hiding this comment.
nice catch! thanks, fixed this one
Sorry, something went wrong.
There was a problem hiding this comment.
I have reverted this because truststore must be at the system truststore and in order to do that we need to copy the file too. Sorry about that.
Sorry, something went wrong.
|
Thanks for your contribution, @mkorolyov ! |
Sorry, something went wrong.
| Back | FazBrowse Home | New Git URL |
ScyllaDB is an open-source distributed NoSQL wide-column data store. It gains wide popularity as a drop-in replacement for Cassandra but a significantly faster one.
This PR adds the ScyllaDB module.