Skip to content
This repository was archived by the owner on May 26, 2023. It is now read-only.

Commit 448d0aa

Browse files
aegershmanaegershman
authored
yugabyte-2.3.1.0 + release 0.4.1 (#254)
* include yb 2.3.1.0 blobs * remove explicitly defining post_install in src * blobs uploaded * update release version
1 parent f625289 commit 448d0aa

File tree

10 files changed

+77
-131
lines changed

10 files changed

+77
-131
lines changed

‎.final_builds/packages/yugabyte/index.yml

+4
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,10 @@ builds:
77
version: 1005968d9e8ed1fb9fb831285eccf06916a9583b9e5a2338d6a9972f517920eb
88
blobstore_id: 828056aa-b6ee-40b0-4fc1-76f127bf9c0b
99
sha1: sha256:c1942fa1c1b7dfd5f314959388dd82a4ea566ed52ccc568dd244a9c8650042f7
10+
1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df:
11+
version: 1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df
12+
blobstore_id: d85e1295-f130-419c-4c9a-1798a9ebb037
13+
sha1: sha256:fecb6b065e4cb0f8ca9a495fb8bb9efeb94e0ab9d5190230eba38344fdca2173
1014
583b2492e4e0f990472c1b27c1cff6e780380379e7576a31470da7e263db2bcd:
1115
version: 583b2492e4e0f990472c1b27c1cff6e780380379e7576a31470da7e263db2bcd
1216
blobstore_id: 7eb7009d-394f-4379-634a-0e72e47d6ed9

‎README.md

+4-4
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,11 @@ This is a [BOSH](http://bosh.io/) release for [YugabyteDB](https://github.com/yu
44

55
## server-to-server tls
66

7-
TLS is currently under development. For the time being it's on by default, and `allow_insecure_connections: false` between nodes by default. You can opt-out using an operator file.
7+
TLS for server-to-server ("node-to-node", as in, traffic between `tserver` and/or `master` nodes) is on _and required_ by default, i.e. `allow_insecure_connections: false` by default. You can modify these properties using operator files.
88

99
We use BOSH's credhub integration to generate individual certificates for both `master` and `tserver` instance groups leveraging [wildcard BOSH DNS values for the certificate SANs, meaning the actual hostname DNS values are handled automatically](https://bosh.io/docs/dns/). Since they're both signed by the same CA (by default located in credhub under `/services/tls_ca`, which is the CA for service instances which nearly all other service offerings in Cloud Foundry leverage for TLS), and each have the same `common_name`, they should be compatible with one another.
1010

11-
[It's a bit unclear how `common_name` and `alternative_names` should be configured](https://docs.yugabyte.com/latest/secure/tls-encryption/server-certificates/). Is it completely arbitrary? Does the file name actually matter? Does it have to be related to the DNS hostname of each node instance? We'll all figure it out _together_ 💖
11+
[It's a bit unclear to me how `common_name` and `alternative_names` should be configured](https://docs.yugabyte.com/latest/secure/tls-encryption/server-certificates/). Is it completely arbitrary? Does the file name actually matter? Does it have to be related to the DNS hostname of each node instance? We'll all figure it out _together_ 💖
1212

1313
For the moment we'll assume it's looking for the name to be the configured hostname of the individual host. We can assume this because of the following log line from `/var/vcap/sys/log/yb-master/yb-master.INFO`:
1414

@@ -20,9 +20,9 @@ I0305 00:19:30.295537 6 secure.cc:102] Certs directory: /var/vcap/jobs/yb-ma
2020

2121
## client-to-server tls
2222

23-
On by default, but `allow_insecure_connections: true` by default for optional use of TLS from clients. All settings can be configured using operator files.
23+
TLS for client-to-server (as in, from a client application using the universe) is on, but _not required_ by default, i.e. `allow_insecure_connections: true` by default for optional use of TLS from clients. You can modify these properties using operator files.
2424

25-
[Also also `YEDIS` does not support client-server TLS](https://docs.yugabyte.com/latest/secure/tls-encryption/)
25+
[Note, `YEDIS` does not support client-to-server TLS](https://docs.yugabyte.com/latest/secure/tls-encryption/)
2626

2727
## regarding rpc_bind and broadcast_bind
2828

‎Taskfile.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ env:
55
OPENJDK_VERSION: 1.8.0_265
66
PYTHON_VERSION: 2.7.6
77
YB_SAMPLE_APPS_VERSION: 1.3.0
8-
YB_VERSION: 2.3.0.0
8+
YB_VERSION: 2.3.1.0
99

1010
tasks:
1111
dl-openjdk:

‎config/blobs.yml

+7-7
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
11
openjdk/openjdk-1.8.0_265.tar.gz:
22
size: 40822176
3-
object_id: e511fad6-857b-4ca6-574a-7096b9f13b05
3+
object_id: fbe5289f-af13-46c0-4caa-b36222983d3f
44
sha: sha256:a754ed4e922630d18ec382e810460009a176e1cb9d2955b200e2dca972f6702e
55
python/Python-2.7.6.tgz:
66
size: 14725931
7-
object_id: f4d133d0-d234-4d8d-5f35-c193f42dd33f
7+
object_id: 8777d579-8247-4a91-6d0e-ce3a9dcdb934
88
sha: sha256:99c6860b70977befa1590029fae092ddb18db1d69ae67e8b9385b66ed104ba58
99
yugabyte/yb-sample-apps-1.3.0.jar:
1010
size: 13865112
11-
object_id: edb1122c-581e-4a54-6811-7d8195b5b294
11+
object_id: 034ba809-77b8-4ec2-4080-2e5c769c8ddc
1212
sha: sha256:3565845ef307463074218bb51a057af82a2d6e765ddcb13859f121a75f1cc006
13-
yugabyte/yugabyte-2.3.0.0-linux.tar.gz:
14-
size: 498227497
15-
object_id: 9161a3ce-b9e5-4285-5be5-59d25458ee10
16-
sha: sha256:01d66fc2df9cf6b9f5b7231866d1f26e15996a28b24c7a02c704cf4e4435bf17
13+
yugabyte/yugabyte-2.3.1.0-linux.tar.gz:
14+
size: 498790033
15+
object_id: fe0b306b-5f35-4a55-7a6b-fe1d34973d89
16+
sha: sha256:1705f03b6fae24044812312f87927089e8733cfbb11dad05fe82bee7ecfb718f

‎manifests/versions.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,5 @@ bpm_sha1: dcf0582d838a73de29da273552ae79ac3098ee8b
33
bpm_version: 1.1.9
44
syslog_release_sha1: c956394fce7e74f741e4ae8c256b480904ad5942
55
syslog_release_version: 11.6.1
6-
yugabyte_boshrelease_sha1: 14e42f391f21f6514ca17d15d9bdb18a7f7df444
7-
yugabyte_boshrelease_version: 0.4.0
6+
yugabyte_boshrelease_sha1: 9831512e2851be157abb37b9fd55e52c6e78a8be
7+
yugabyte_boshrelease_version: 0.4.1

‎packages/yugabyte/packaging

-3
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,5 @@ set -eux
55
tar zxf yugabyte/yugabyte-*-linux.tar.gz
66
cp -a yugabyte-*/* ${BOSH_INSTALL_TARGET}
77

8-
# TODO remove after post_install scripts to account for symlinks
9-
mv yugabyte-additional/post_install.sh ${BOSH_INSTALL_TARGET}/bin/post_install.sh
10-
118
source /var/vcap/packages/python*/bosh/compile.env
129
bosh_generate_runtime_env

‎packages/yugabyte/spec

-1
Original file line numberDiff line numberDiff line change
@@ -5,5 +5,4 @@ dependencies:
55
- python
66

77
files:
8-
- yugabyte-additional/post_install.sh
98
- yugabyte/yugabyte-*-linux.tar.gz

‎releases/yugabyte/index.yml

+2
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,8 @@ builds:
2727
version: 0.0.7
2828
b3fb0b75-d651-4a1e-5248-b5580bac7ce7:
2929
version: 0.0.12
30+
bb3f73c2-6b0d-48b1-5f1a-069271f2b10f:
31+
version: 0.4.1
3032
bf4237bf-596c-41ad-781a-cf5b9d6978bd:
3133
version: 0.0.1
3234
d9c02440-55b0-4474-5919-99cbd80dc03d:

‎releases/yugabyte/yugabyte-0.4.1.yml

+57
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
name: yugabyte
2+
version: 0.4.1
3+
commit_hash: a131c7d
4+
uncommitted_changes: false
5+
jobs:
6+
- name: setup_redis_table
7+
version: bb12c041aacc21fdf1516966c6ed7f90812c6e929b55668b6bd14d7caa7040d9
8+
fingerprint: bb12c041aacc21fdf1516966c6ed7f90812c6e929b55668b6bd14d7caa7040d9
9+
sha1: sha256:c3366a62870b8fe32414a885993c941a11579ef43f99037f20cd52d1b2c7f546
10+
packages:
11+
- yugabyte
12+
- name: yb-master
13+
version: 01ffdf3e4c50be1e595f5d2c2ed036b709eb00f95b2f0c38fd75dad2c75c68ac
14+
fingerprint: 01ffdf3e4c50be1e595f5d2c2ed036b709eb00f95b2f0c38fd75dad2c75c68ac
15+
sha1: sha256:ed76820851230c384342d3c7b6c4c4e9f76da4ae3a6d262fdb887672b8bcf479
16+
packages:
17+
- yugabyte
18+
- name: yb-sample-apps
19+
version: d9fe858ecdf17c7c64694ea7422568ab21209df30fc2bf5d45e2c9c4230eba77
20+
fingerprint: d9fe858ecdf17c7c64694ea7422568ab21209df30fc2bf5d45e2c9c4230eba77
21+
sha1: sha256:9a8cd7332cc671bcea65004af2298c887f0effc096bc6579fc288ea4c99a5f03
22+
packages:
23+
- openjdk
24+
- yb-sample-apps
25+
- name: yb-tserver
26+
version: 7665804ab273b38a48fb15e4946a0b6fa3377cd52a1dabc584a0f9b6612680f5
27+
fingerprint: 7665804ab273b38a48fb15e4946a0b6fa3377cd52a1dabc584a0f9b6612680f5
28+
sha1: sha256:85d19ec73bcb3f99f8c7d57ac08a9289d03eaaabbaa0977bf95c0bf3677fdbde
29+
packages:
30+
- python
31+
- yugabyte
32+
packages:
33+
- name: openjdk
34+
version: 8dac24aaf408201b1a61b8a2af38fd56a89a35544fc95cd1a001307524d157dd
35+
fingerprint: 8dac24aaf408201b1a61b8a2af38fd56a89a35544fc95cd1a001307524d157dd
36+
sha1: sha256:169f27d4ad5ab6f423f158c5f1f1a48a93d94455a015d3e23e77c057e25ad1e4
37+
dependencies: []
38+
- name: python
39+
version: 4ecd64c8a248f712aa51f67bc4304aa3d023a4f49e20540c1e75de2ab11ae627
40+
fingerprint: 4ecd64c8a248f712aa51f67bc4304aa3d023a4f49e20540c1e75de2ab11ae627
41+
sha1: sha256:f6f78f67a8bd894dbd5620f96d567d75e0f0445e9412506e9f4c7381c6437801
42+
dependencies: []
43+
- name: yb-sample-apps
44+
version: f492bfdd04944f8c9ab035325e49718306cc72e1e6f756ab528f4b3a420c8fc0
45+
fingerprint: f492bfdd04944f8c9ab035325e49718306cc72e1e6f756ab528f4b3a420c8fc0
46+
sha1: sha256:42d31e67680bc7f67c792ca79fe82f12bf0e356768f1181e44da78d17368a8f5
47+
dependencies: []
48+
- name: yugabyte
49+
version: 1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df
50+
fingerprint: 1c513014e40a98360262689b406811e0d356c778c1c8c1d8452a6e80f9ff33df
51+
sha1: sha256:fecb6b065e4cb0f8ca9a495fb8bb9efeb94e0ab9d5190230eba38344fdca2173
52+
dependencies:
53+
- python
54+
license:
55+
version: eefa533b44473426f0d39cb7de4a5de1342863955201ca83ddaefe4a0c96d174
56+
fingerprint: eefa533b44473426f0d39cb7de4a5de1342863955201ca83ddaefe4a0c96d174
57+
sha1: sha256:0e7ea4df86ce9bac22b88dd6a266d6b44c6bcfcb0b22570296d51f52ac75d5e1

‎src/yugabyte-additional/post_install.sh

-113
This file was deleted.

0 commit comments

Comments
 (0)