Skip to content

HDDS-16078. [STS] Branch merge checklist - #523

Open
fmorg-git wants to merge 4 commits into
apache:masterfrom
fmorg-git:HDDS-16078
Open

HDDS-16078. [STS] Branch merge checklist#523
fmorg-git wants to merge 4 commits into
apache:masterfrom
fmorg-git:HDDS-16078

Conversation

@fmorg-git

@fmorg-git fmorg-git commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Please describe your PR in detail:

  • Add branch merge checklist for STS

What is the link to the Apache Jira?

https://issues.apache.org/jira/browse/HDDS-16078

How was this patch tested?

Tested in docker compose (viewing web page)

image

Co-authored-by: Cursor <cursoragent@cursor.com>

## 2. Documentation

[User documentation](https://ozone.apache.org/docs/next/administrator-guide/operations/s3/sts) for Ozone S3 Security Token Service (STS) has been added.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

right, it should be accessible once #510 is merged

</property>
```

A new RocksDB table stores revoked STS token entries. No OM versioning-framework feature flag is used.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can add the table name here.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated - 5340ec8


## 7. Coverage / Code quality

[New Code Coverage](https://sonarcloud.io/summary/new_code?id=hadoop-ozone&branch=HDDS-13323-sts) for STS (HDDS-13323-sts) is **89.1%** and [Overall Code Coverage](https://sonarcloud.io/summary/overall?id=hadoop-ozone&branch=HDDS-13323-sts) is **75.4%**.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

89.1% is a very good data.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks


## 5. Docker-compose / Acceptance tests

New robot tests `ozone-secure-sts.robot` and `ozone-secure-sts-multitenant.robot` are being added. Furthermore, a shell script to test Polaris with Ozone STS (`polaris-smoketest.sh`) is being added.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can add the link for ozone-secure-sts.robot, ozone-secure-sts-multitenant.robot and polaris-smoketest.sh later once they are merged.

Fabian Morgan and others added 2 commits August 5, 2026 20:06
Use "milliseconds" instead of "millis" in the s3RevokedStsTokenTable row.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants