Skip to content

HBASE-27118 Add security headers to Thrift/HTTP server (branch-2.5) - #6156

Merged
anmolnar merged 2 commits into
apache:branch-2.5from
anmolnar:HBASE-27118_x25
Aug 15, 2024
Merged

HBASE-27118 Add security headers to Thrift/HTTP server (branch-2.5)#6156
anmolnar merged 2 commits into
apache:branch-2.5from
anmolnar:HBASE-27118_x25

Conversation

@anmolnar

@anmolnaranmolnar commented Aug 15, 2024

Copy link
Copy Markdown
Contributor

No description provided.

@anmolnar
HBASE-27118 Add security headers to Thrift/HTTP server (branch-2) (ap…
4aba4eb
…ache#6153)
Signed-off-by: Duo Zhang <zhangduo@apache.org>
Signed-off-by: Pankaj <pankajkumar@apache.org>
Signed-off-by: Istvan Toth <stoty@apache.org>
@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 42sDocker mode activated.
-0 ⚠️yetus0m 5sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 9sMaven dependency ordering for branch
+1 💚mvninstall2m 32sbranch-2.5 passed
+1 💚compile0m 58sbranch-2.5 passed
+1 💚javadoc0m 52sbranch-2.5 passed
+1 💚shadedjars4m 44sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+0 🆗mvndep0m 15sMaven dependency ordering for patch
+1 💚mvninstall2m 23sthe patch passed
+1 💚compile0m 59sthe patch passed
+1 💚javac0m 59sthe patch passed
+1 💚javadoc0m 52sthe patch passed
+1 💚shadedjars4m 43spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
+1 💚unit1m 1shbase-http in the patch passed.
+1 💚unit6m 30shbase-thrift in the patch passed.
+1 💚unit3m 41shbase-rest in the patch passed.
31m 59s
SubsystemReport/Notes
DockerClientAPI=1.46 ServerAPI=1.46 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/artifact/yetus-jdk8-hadoop2-check/output/Dockerfile
GITHUB PR#6156
Optional Testsjavac javadoc unit compile shadedjars
unameLinux 76bfada621fe 5.4.0-186-generic #206-Ubuntu SMP Fri Apr 26 12:31:10 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / 4aba4eb
Default JavaTemurin-1.8.0_412-b08
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/testReport/
Max. process+thread count1450 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 20sDocker mode activated.
-0 ⚠️yetus0m 5sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 10sMaven dependency ordering for branch
+1 💚mvninstall2m 53sbranch-2.5 passed
+1 💚compile1m 4sbranch-2.5 passed
+1 💚javadoc1m 3sbranch-2.5 passed
+1 💚shadedjars5m 8sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+0 🆗mvndep0m 19sMaven dependency ordering for patch
+1 💚mvninstall2m 48sthe patch passed
+1 💚compile1m 6sthe patch passed
+1 💚javac1m 6sthe patch passed
+1 💚javadoc1m 3sthe patch passed
+1 💚shadedjars5m 6spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
+1 💚unit0m 49shbase-http in the patch passed.
+1 💚unit6m 42shbase-thrift in the patch passed.
+1 💚unit3m 41shbase-rest in the patch passed.
33m 44s
SubsystemReport/Notes
DockerClientAPI=1.46 ServerAPI=1.46 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR#6156
Optional Testsjavac javadoc unit compile shadedjars
unameLinux c593e3d18937 5.4.0-192-generic #212-Ubuntu SMP Fri Jul 5 09:47:39 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / 4aba4eb
Default JavaEclipse Adoptium-11.0.23+9
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/testReport/
Max. process+thread count1567 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 43sDocker mode activated.
-0 ⚠️yetus0m 5sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 10sMaven dependency ordering for branch
+1 💚mvninstall2m 57sbranch-2.5 passed
+1 💚compile1m 10sbranch-2.5 passed
+1 💚javadoc1m 5sbranch-2.5 passed
+1 💚shadedjars5m 11sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+0 🆗mvndep0m 15sMaven dependency ordering for patch
+1 💚mvninstall2m 59sthe patch passed
+1 💚compile1m 8sthe patch passed
+1 💚javac1m 8sthe patch passed
+1 💚javadoc1m 5sthe patch passed
+1 💚shadedjars5m 8spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
+1 💚unit0m 48shbase-http in the patch passed.
+1 💚unit6m 23shbase-thrift in the patch passed.
+1 💚unit3m 50shbase-rest in the patch passed.
34m 26s
SubsystemReport/Notes
DockerClientAPI=1.46 ServerAPI=1.46 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR#6156
Optional Testsjavac javadoc unit compile shadedjars
unameLinux 9d2e757aa5e5 5.4.0-192-generic #212-Ubuntu SMP Fri Jul 5 09:47:39 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / 4aba4eb
Default JavaEclipse Adoptium-17.0.11+9
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/testReport/
Max. process+thread count2179 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

💔 -1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 41sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+0 🆗codespell0m 0scodespell was not available.
+0 🆗detsecrets0m 0sdetect-secrets was not available.
+1 💚@author0m 0sThe patch does not contain any @author tags.
+1 💚hbaseanti0m 0sPatch does not have any anti-patterns.
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 13sMaven dependency ordering for branch
+1 💚mvninstall2m 54sbranch-2.5 passed
+1 💚compile1m 24sbranch-2.5 passed
+1 💚checkstyle0m 46sbranch-2.5 passed
+1 💚spotbugs1m 53sbranch-2.5 passed
+1 💚spotless0m 45sbranch has no errors when running spotless:check.
_ Patch Compile Tests _
+0 🆗mvndep0m 15sMaven dependency ordering for patch
+1 💚mvninstall2m 49sthe patch passed
+1 💚compile1m 24sthe patch passed
+1 💚javac1m 24sthe patch passed
+1 💚blanks0m 1sThe patch has no blanks issues.
-0 ⚠️checkstyle0m 9s/results-checkstyle-hbase-rest.txthbase-rest: The patch generated 2 new + 3 unchanged - 0 fixed = 5 total (was 3)
+1 💚xmllint0m 0sNo new issues.
+1 💚spotbugs2m 14sthe patch passed
+1 💚hadoopcheck21m 59sPatch does not cause any errors with Hadoop 2.10.2 or 3.2.4 3.3.6 3.4.0.
-1 ❌spotless0m 43spatch has 22 errors when running spotless:check, run spotless:apply to fix.
_ Other Tests _
+1 💚asflicense0m 27sThe patch does not generate ASF License warnings.
41m 24s
SubsystemReport/Notes
DockerClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR#6156
Optional Testsdupname asflicense javac spotbugs checkstyle codespell detsecrets compile hadoopcheck hbaseanti spotless xmllint
unameLinux df526d7087c8 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / 4aba4eb
Default JavaEclipse Adoptium-11.0.23+9
spotlesshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/artifact/yetus-general-check/output/patch-spotless.txt
Max. process+thread count79 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/1/console
versionsgit=2.34.1 maven=3.9.8 spotbugs=4.7.3 xmllint=20913
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 42sDocker mode activated.
-0 ⚠️yetus0m 5sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 9sMaven dependency ordering for branch
+1 💚mvninstall2m 27sbranch-2.5 passed
+1 💚compile0m 59sbranch-2.5 passed
+1 💚javadoc0m 53sbranch-2.5 passed
+1 💚shadedjars4m 45sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+0 🆗mvndep0m 15sMaven dependency ordering for patch
+1 💚mvninstall2m 24sthe patch passed
+1 💚compile0m 58sthe patch passed
+1 💚javac0m 58sthe patch passed
+1 💚javadoc0m 50sthe patch passed
+1 💚shadedjars4m 49spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
+1 💚unit1m 0shbase-http in the patch passed.
+1 💚unit6m 34shbase-thrift in the patch passed.
+1 💚unit3m 41shbase-rest in the patch passed.
31m 51s
SubsystemReport/Notes
DockerClientAPI=1.46 ServerAPI=1.46 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/artifact/yetus-jdk8-hadoop2-check/output/Dockerfile
GITHUB PR#6156
Optional Testsjavac javadoc unit compile shadedjars
unameLinux 7a96e887941f 5.4.0-186-generic #206-Ubuntu SMP Fri Apr 26 12:31:10 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / db10e58
Default JavaTemurin-1.8.0_412-b08
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/testReport/
Max. process+thread count1440 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 41sDocker mode activated.
-0 ⚠️yetus0m 5sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 10sMaven dependency ordering for branch
+1 💚mvninstall2m 47sbranch-2.5 passed
+1 💚compile1m 8sbranch-2.5 passed
+1 💚javadoc1m 3sbranch-2.5 passed
+1 💚shadedjars5m 10sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+0 🆗mvndep0m 12sMaven dependency ordering for patch
+1 💚mvninstall2m 53sthe patch passed
+1 💚compile1m 7sthe patch passed
+1 💚javac1m 7sthe patch passed
+1 💚javadoc1m 4sthe patch passed
+1 💚shadedjars5m 7spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
+1 💚unit0m 48shbase-http in the patch passed.
+1 💚unit6m 23shbase-thrift in the patch passed.
+1 💚unit3m 55shbase-rest in the patch passed.
33m 51s
SubsystemReport/Notes
DockerClientAPI=1.46 ServerAPI=1.46 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR#6156
Optional Testsjavac javadoc unit compile shadedjars
unameLinux f1cda1f4949f 5.4.0-192-generic #212-Ubuntu SMP Fri Jul 5 09:47:39 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / db10e58
Default JavaEclipse Adoptium-17.0.11+9
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/testReport/
Max. process+thread count2215 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 44sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+0 🆗codespell0m 1scodespell was not available.
+0 🆗detsecrets0m 1sdetect-secrets was not available.
+1 💚@author0m 0sThe patch does not contain any @author tags.
+1 💚hbaseanti0m 0sPatch does not have any anti-patterns.
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 11sMaven dependency ordering for branch
+1 💚mvninstall3m 24sbranch-2.5 passed
+1 💚compile1m 47sbranch-2.5 passed
+1 💚checkstyle0m 56sbranch-2.5 passed
+1 💚spotbugs2m 20sbranch-2.5 passed
+1 💚spotless0m 50sbranch has no errors when running spotless:check.
_ Patch Compile Tests _
+0 🆗mvndep0m 11sMaven dependency ordering for patch
+1 💚mvninstall3m 36sthe patch passed
+1 💚compile1m 32sthe patch passed
+1 💚javac1m 32sthe patch passed
+1 💚blanks0m 0sThe patch has no blanks issues.
+1 💚checkstyle0m 59sthe patch passed
+1 💚xmllint0m 0sNo new issues.
+1 💚spotbugs2m 54sthe patch passed
+1 💚hadoopcheck23m 52sPatch does not cause any errors with Hadoop 2.10.2 or 3.2.4 3.3.6 3.4.0.
+1 💚spotless0m 53spatch has no errors when running spotless:check.
_ Other Tests _
+1 💚asflicense0m 32sThe patch does not generate ASF License warnings.
47m 0s
SubsystemReport/Notes
DockerClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/artifact/yetus-general-check/output/Dockerfile
GITHUB PR#6156
Optional Testsdupname asflicense javac spotbugs checkstyle codespell detsecrets compile hadoopcheck hbaseanti spotless xmllint
unameLinux eb24aaef1425 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / db10e58
Default JavaEclipse Adoptium-11.0.23+9
Max. process+thread count86 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/console
versionsgit=2.34.1 maven=3.9.8 spotbugs=4.7.3 xmllint=20913
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Aug 15, 2024

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 24sDocker mode activated.
-0 ⚠️yetus0m 4sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ branch-2.5 Compile Tests _
+0 🆗mvndep0m 11sMaven dependency ordering for branch
+1 💚mvninstall3m 38sbranch-2.5 passed
+1 💚compile1m 34sbranch-2.5 passed
+1 💚javadoc1m 23sbranch-2.5 passed
+1 💚shadedjars8m 21sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+0 🆗mvndep0m 22sMaven dependency ordering for patch
+1 💚mvninstall4m 46sthe patch passed
+1 💚compile1m 37sthe patch passed
+1 💚javac1m 37sthe patch passed
+1 💚javadoc1m 40sthe patch passed
+1 💚shadedjars8m 25spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
+1 💚unit1m 27shbase-http in the patch passed.
+1 💚unit7m 51shbase-thrift in the patch passed.
+1 💚unit6m 29shbase-rest in the patch passed.
49m 41s
SubsystemReport/Notes
DockerClientAPI=1.46 ServerAPI=1.46 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/artifact/yetus-jdk11-hadoop3-check/output/Dockerfile
GITHUB PR#6156
Optional Testsjavac javadoc unit compile shadedjars
unameLinux 9da28a1b9f06 5.4.0-192-generic #212-Ubuntu SMP Fri Jul 5 09:47:39 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2.5 / db10e58
Default JavaEclipse Adoptium-11.0.23+9
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/testReport/
Max. process+thread count1556 (vs. ulimit of 30000)
modulesC: hbase-http hbase-thrift hbase-rest U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6156/2/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@anmolnar
anmolnar merged commit cd2a844 into apache:branch-2.5Aug 15, 2024
@anmolnar
anmolnar deleted the HBASE-27118_x25 branch August 15, 2024 21:36
anmolnar added a commit that referenced this pull request Aug 15, 2024
@anmolnar
HBASE-27118Add security headers to Thrift/HTTP server (branch-2.4) (#…
e203a59
…6156)
Signed-off-by: Duo Zhang <zhangduo@apache.org>
Signed-off-by: Pankaj <pankajkumar@apache.org>
Signed-off-by: Istvan Toth <stoty@apache.org>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@anmolnar@Apache-HBase