Skip to content
This repository has been archived by the owner on May 26, 2023. It is now read-only.

Commit

Permalink
yugabyte-2.3.1.0 + release 0.4.1 (#254)
Browse files Browse the repository at this point in the history
* include yb 2.3.1.0 blobs

* remove explicitly defining post_install in src

* blobs uploaded

* update release version
  • Loading branch information
aegershman authored Sep 18, 2020
1 parent f625289 commit 448d0aa
Show file tree
Hide file tree
Showing 10 changed files with 77 additions and 131 deletions.
4 changes: 4 additions & 0 deletions .final_builds/packages/yugabyte/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@ builds:
version: 1005968d9e8ed1fb9fb831285eccf06916a9583b9e5a2338d6a9972f517920eb
blobstore_id: 828056aa-b6ee-40b0-4fc1-76f127bf9c0b
sha1: sha256:c1942fa1c1b7dfd5f314959388dd82a4ea566ed52ccc568dd244a9c8650042f7
1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df:
version: 1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df
blobstore_id: d85e1295-f130-419c-4c9a-1798a9ebb037
sha1: sha256:fecb6b065e4cb0f8ca9a495fb8bb9efeb94e0ab9d5190230eba38344fdca2173
583b2492e4e0f990472c1b27c1cff6e780380379e7576a31470da7e263db2bcd:
version: 583b2492e4e0f990472c1b27c1cff6e780380379e7576a31470da7e263db2bcd
blobstore_id: 7eb7009d-394f-4379-634a-0e72e47d6ed9
Expand Down
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,11 @@ This is a [BOSH](http://bosh.io/) release for [YugabyteDB](https://github.com/yu

## server-to-server tls

TLS is currently under development. For the time being it's on by default, and `allow_insecure_connections: false` between nodes by default. You can opt-out using an operator file.
TLS for server-to-server ("node-to-node", as in, traffic between `tserver` and/or `master` nodes) is on _and required_ by default, i.e. `allow_insecure_connections: false` by default. You can modify these properties using operator files.

We use BOSH's credhub integration to generate individual certificates for both `master` and `tserver` instance groups leveraging [wildcard BOSH DNS values for the certificate SANs, meaning the actual hostname DNS values are handled automatically](https://bosh.io/docs/dns/). Since they're both signed by the same CA (by default located in credhub under `/services/tls_ca`, which is the CA for service instances which nearly all other service offerings in Cloud Foundry leverage for TLS), and each have the same `common_name`, they should be compatible with one another.

[It's a bit unclear how `common_name` and `alternative_names` should be configured](https://docs.yugabyte.com/latest/secure/tls-encryption/server-certificates/). Is it completely arbitrary? Does the file name actually matter? Does it have to be related to the DNS hostname of each node instance? We'll all figure it out _together_ 💖
[It's a bit unclear to me how `common_name` and `alternative_names` should be configured](https://docs.yugabyte.com/latest/secure/tls-encryption/server-certificates/). Is it completely arbitrary? Does the file name actually matter? Does it have to be related to the DNS hostname of each node instance? We'll all figure it out _together_ 💖

For the moment we'll assume it's looking for the name to be the configured hostname of the individual host. We can assume this because of the following log line from `/var/vcap/sys/log/yb-master/yb-master.INFO`:

Expand All @@ -20,9 +20,9 @@ I0305 00:19:30.295537 6 secure.cc:102] Certs directory: /var/vcap/jobs/yb-ma

## client-to-server tls

On by default, but `allow_insecure_connections: true` by default for optional use of TLS from clients. All settings can be configured using operator files.
TLS for client-to-server (as in, from a client application using the universe) is on, but _not required_ by default, i.e. `allow_insecure_connections: true` by default for optional use of TLS from clients. You can modify these properties using operator files.

[Also also `YEDIS` does not support client-server TLS](https://docs.yugabyte.com/latest/secure/tls-encryption/)
[Note, `YEDIS` does not support client-to-server TLS](https://docs.yugabyte.com/latest/secure/tls-encryption/)

## regarding rpc_bind and broadcast_bind

Expand Down
2 changes: 1 addition & 1 deletion Taskfile.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ env:
OPENJDK_VERSION: 1.8.0_265
PYTHON_VERSION: 2.7.6
YB_SAMPLE_APPS_VERSION: 1.3.0
YB_VERSION: 2.3.0.0
YB_VERSION: 2.3.1.0

tasks:
dl-openjdk:
Expand Down
14 changes: 7 additions & 7 deletions config/blobs.yml
Original file line number Diff line number Diff line change
@@ -1,16 +1,16 @@
openjdk/openjdk-1.8.0_265.tar.gz:
size: 40822176
object_id: e511fad6-857b-4ca6-574a-7096b9f13b05
object_id: fbe5289f-af13-46c0-4caa-b36222983d3f
sha: sha256:a754ed4e922630d18ec382e810460009a176e1cb9d2955b200e2dca972f6702e
python/Python-2.7.6.tgz:
size: 14725931
object_id: f4d133d0-d234-4d8d-5f35-c193f42dd33f
object_id: 8777d579-8247-4a91-6d0e-ce3a9dcdb934
sha: sha256:99c6860b70977befa1590029fae092ddb18db1d69ae67e8b9385b66ed104ba58
yugabyte/yb-sample-apps-1.3.0.jar:
size: 13865112
object_id: edb1122c-581e-4a54-6811-7d8195b5b294
object_id: 034ba809-77b8-4ec2-4080-2e5c769c8ddc
sha: sha256:3565845ef307463074218bb51a057af82a2d6e765ddcb13859f121a75f1cc006
yugabyte/yugabyte-2.3.0.0-linux.tar.gz:
size: 498227497
object_id: 9161a3ce-b9e5-4285-5be5-59d25458ee10
sha: sha256:01d66fc2df9cf6b9f5b7231866d1f26e15996a28b24c7a02c704cf4e4435bf17
yugabyte/yugabyte-2.3.1.0-linux.tar.gz:
size: 498790033
object_id: fe0b306b-5f35-4a55-7a6b-fe1d34973d89
sha: sha256:1705f03b6fae24044812312f87927089e8733cfbb11dad05fe82bee7ecfb718f
4 changes: 2 additions & 2 deletions manifests/versions.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,5 +3,5 @@ bpm_sha1: dcf0582d838a73de29da273552ae79ac3098ee8b
bpm_version: 1.1.9
syslog_release_sha1: c956394fce7e74f741e4ae8c256b480904ad5942
syslog_release_version: 11.6.1
yugabyte_boshrelease_sha1: 14e42f391f21f6514ca17d15d9bdb18a7f7df444
yugabyte_boshrelease_version: 0.4.0
yugabyte_boshrelease_sha1: 9831512e2851be157abb37b9fd55e52c6e78a8be
yugabyte_boshrelease_version: 0.4.1
3 changes: 0 additions & 3 deletions packages/yugabyte/packaging
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,5 @@ set -eux
tar zxf yugabyte/yugabyte-*-linux.tar.gz
cp -a yugabyte-*/* ${BOSH_INSTALL_TARGET}

# TODO remove after post_install scripts to account for symlinks
mv yugabyte-additional/post_install.sh ${BOSH_INSTALL_TARGET}/bin/post_install.sh

source /var/vcap/packages/python*/bosh/compile.env
bosh_generate_runtime_env
1 change: 0 additions & 1 deletion packages/yugabyte/spec
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,4 @@ dependencies:
- python

files:
- yugabyte-additional/post_install.sh
- yugabyte/yugabyte-*-linux.tar.gz
2 changes: 2 additions & 0 deletions releases/yugabyte/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ builds:
version: 0.0.7
b3fb0b75-d651-4a1e-5248-b5580bac7ce7:
version: 0.0.12
bb3f73c2-6b0d-48b1-5f1a-069271f2b10f:
version: 0.4.1
bf4237bf-596c-41ad-781a-cf5b9d6978bd:
version: 0.0.1
d9c02440-55b0-4474-5919-99cbd80dc03d:
Expand Down
57 changes: 57 additions & 0 deletions releases/yugabyte/yugabyte-0.4.1.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
name: yugabyte
version: 0.4.1
commit_hash: a131c7d
uncommitted_changes: false
jobs:
- name: setup_redis_table
version: bb12c041aacc21fdf1516966c6ed7f90812c6e929b55668b6bd14d7caa7040d9
fingerprint: bb12c041aacc21fdf1516966c6ed7f90812c6e929b55668b6bd14d7caa7040d9
sha1: sha256:c3366a62870b8fe32414a885993c941a11579ef43f99037f20cd52d1b2c7f546
packages:
- yugabyte
- name: yb-master
version: 01ffdf3e4c50be1e595f5d2c2ed036b709eb00f95b2f0c38fd75dad2c75c68ac
fingerprint: 01ffdf3e4c50be1e595f5d2c2ed036b709eb00f95b2f0c38fd75dad2c75c68ac
sha1: sha256:ed76820851230c384342d3c7b6c4c4e9f76da4ae3a6d262fdb887672b8bcf479
packages:
- yugabyte
- name: yb-sample-apps
version: d9fe858ecdf17c7c64694ea7422568ab21209df30fc2bf5d45e2c9c4230eba77
fingerprint: d9fe858ecdf17c7c64694ea7422568ab21209df30fc2bf5d45e2c9c4230eba77
sha1: sha256:9a8cd7332cc671bcea65004af2298c887f0effc096bc6579fc288ea4c99a5f03
packages:
- openjdk
- yb-sample-apps
- name: yb-tserver
version: 7665804ab273b38a48fb15e4946a0b6fa3377cd52a1dabc584a0f9b6612680f5
fingerprint: 7665804ab273b38a48fb15e4946a0b6fa3377cd52a1dabc584a0f9b6612680f5
sha1: sha256:85d19ec73bcb3f99f8c7d57ac08a9289d03eaaabbaa0977bf95c0bf3677fdbde
packages:
- python
- yugabyte
packages:
- name: openjdk
version: 8dac24aaf408201b1a61b8a2af38fd56a89a35544fc95cd1a001307524d157dd
fingerprint: 8dac24aaf408201b1a61b8a2af38fd56a89a35544fc95cd1a001307524d157dd
sha1: sha256:169f27d4ad5ab6f423f158c5f1f1a48a93d94455a015d3e23e77c057e25ad1e4
dependencies: []
- name: python
version: 4ecd64c8a248f712aa51f67bc4304aa3d023a4f49e20540c1e75de2ab11ae627
fingerprint: 4ecd64c8a248f712aa51f67bc4304aa3d023a4f49e20540c1e75de2ab11ae627
sha1: sha256:f6f78f67a8bd894dbd5620f96d567d75e0f0445e9412506e9f4c7381c6437801
dependencies: []
- name: yb-sample-apps
version: f492bfdd04944f8c9ab035325e49718306cc72e1e6f756ab528f4b3a420c8fc0
fingerprint: f492bfdd04944f8c9ab035325e49718306cc72e1e6f756ab528f4b3a420c8fc0
sha1: sha256:42d31e67680bc7f67c792ca79fe82f12bf0e356768f1181e44da78d17368a8f5
dependencies: []
- name: yugabyte
version: 1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df
fingerprint: 1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df
sha1: sha256:fecb6b065e4cb0f8ca9a495fb8bb9efeb94e0ab9d5190230eba38344fdca2173
dependencies:
- python
license:
version: eefa533b44473426f0d39cb7de4a5de1342863955201ca83ddaefe4a0c96d174
fingerprint: eefa533b44473426f0d39cb7de4a5de1342863955201ca83ddaefe4a0c96d174
sha1: sha256:0e7ea4df86ce9bac22b88dd6a266d6b44c6bcfcb0b22570296d51f52ac75d5e1
113 changes: 0 additions & 113 deletions src/yugabyte-additional/post_install.sh

This file was deleted.

0 comments on commit 448d0aa

Please sign in to comment.