apache / apache/kyuubi

[FEATURE] Enable SSL on KyuubiThriftBinaryFrontendService to support wire encryption

Open
#1,148 0 comments 0 reactions 0 assignees View on GitHub
help wanted kind:feature
Dominant language
Scala
Stars
2.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

### Search before asking

- [X] I have searched in the [issues](https://github.com/apache/incubator-kyuubi/issues?q=is%3Aissue) and found no similar issues.

### Describe the feature

Please refer to the hive doc https://cwiki.apache.org/confluence/display/hive/setting+up+hiveserver2#SettingUpHiveServer2-SSLEncryption

### Motivation

Enhance wire security

### Describe the solution

_No response_

### Additional context

_No response_

### Are you willing to submit PR?

- [ ] Yes I am willing to submit a PR!

Contributor guide

Open the contributing guide

Research direction

Start with KyuubiThriftBinaryFrontendService and the linked HiveServer2 SSL encryption documentation to determine how SSL should be configured for this frontend. Define the required configuration and verification approach so the service provides encrypted wire communication.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala
Domain
backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.