Skip to content

HDDS-16078. [STS] Branch merge checklist - #523

Merged
ChenSammi merged 8 commits into
apache:masterfrom
fmorg-git:HDDS-16078
Sep 10, 2026
Merged

ChenSammi merged 8 commits into
apache:masterfrom
fmorg-git:HDDS-16078

Conversation

@fmorg-git

@fmorg-git fmorg-git commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Please describe your PR in detail:

  • Add branch merge checklist for STS

What is the link to the Apache Jira?

https://issues.apache.org/jira/browse/HDDS-16078

How was this patch tested?

Tested in docker compose (viewing web page)

image

Co-authored-by: Cursor <cursoragent@cursor.com>

## 2. Documentation

[User documentation](https://ozone.apache.org/docs/next/administrator-guide/operations/s3/sts) for Ozone S3 Security Token Service (STS) has been added.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

right, it should be accessible once #510 is merged

</property>
```

A new RocksDB table stores revoked STS token entries. No OM versioning-framework feature flag is used.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can add the table name here.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated - 5340ec8


## 7. Coverage / Code quality

[New Code Coverage](https://sonarcloud.io/summary/new_code?id=hadoop-ozone&branch=HDDS-13323-sts) for STS (HDDS-13323-sts) is **89.1%** and [Overall Code Coverage](https://sonarcloud.io/summary/overall?id=hadoop-ozone&branch=HDDS-13323-sts) is **75.4%**.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

89.1% is a very good data.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

master was merged into my branch yesterday and code coverage plummeted to 81.58% - not sure why. Previously the last analysis was done around 19 days ago, and I looked at the commits I added since then and they were mostly smoke tests.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new code coverage includes all new commits, not just the commits of this feature branch. So it will drop when merged the master, the same observation from previous feature branch merge time.


## 5. Docker-compose / Acceptance tests

New robot tests `ozone-secure-sts.robot` and `ozone-secure-sts-multitenant.robot` are being added. Furthermore, a shell script to test Polaris with Ozone STS (`polaris-smoketest.sh`) is being added.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can add the link for ozone-secure-sts.robot, ozone-secure-sts-multitenant.robot and polaris-smoketest.sh later once they are merged.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

updated to add links

Fabian Morgan and others added 3 commits August 5, 2026 20:06
Use "milliseconds" instead of "millis" in the s3RevokedStsTokenTable row.

Co-authored-by: Cursor <cursoragent@cursor.com>
@fmorg-git
fmorg-git requested a review from ChenSammi August 18, 2026 07:50
@ChenSammi
ChenSammi merged commit b534b8a into apache:master Sep 10, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants