1394 lines
76 KiB
HTML
1394 lines
76 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<!--
|
|
| Generated by Apache Maven Doxia at 2023-02-28
|
|
| Rendered using Apache Maven Stylus Skin 1.5
|
|
-->
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>Apache Hadoop Azure support – Testing the Azure WASB client</title>
|
|
<style type="text/css" media="all">
|
|
@import url("./css/maven-base.css");
|
|
@import url("./css/maven-theme.css");
|
|
@import url("./css/site.css");
|
|
</style>
|
|
<link rel="stylesheet" href="./css/print.css" type="text/css" media="print" />
|
|
<meta name="Date-Revision-yyyymmdd" content="20230228" />
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
|
|
</head>
|
|
<body class="composite">
|
|
<div id="banner">
|
|
<a href="http://hadoop.apache.org/" id="bannerLeft">
|
|
<img src="http://hadoop.apache.org/images/hadoop-logo.jpg" alt="" />
|
|
</a>
|
|
<a href="http://www.apache.org/" id="bannerRight">
|
|
<img src="http://www.apache.org/images/asf_logo_wide.png" alt="" />
|
|
</a>
|
|
<div class="clear">
|
|
<hr/>
|
|
</div>
|
|
</div>
|
|
<div id="breadcrumbs">
|
|
|
|
<div class="xright"> <a href="http://wiki.apache.org/hadoop" class="externalLink">Wiki</a>
|
|
|
|
|
<a href="https://gitbox.apache.org/repos/asf/hadoop.git" class="externalLink">git</a>
|
|
|
|
| Last Published: 2023-02-28
|
|
| Version: 3.4.0-SNAPSHOT
|
|
</div>
|
|
<div class="clear">
|
|
<hr/>
|
|
</div>
|
|
</div>
|
|
<div id="leftColumn">
|
|
<div id="navcolumn">
|
|
|
|
<h5>General</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../index.html">Overview</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/SingleCluster.html">Single Node Setup</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/ClusterSetup.html">Cluster Setup</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/CommandsManual.html">Commands Reference</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/FileSystemShell.html">FileSystem Shell</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/Compatibility.html">Compatibility Specification</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/DownstreamDev.html">Downstream Developer's Guide</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/AdminCompatibilityGuide.html">Admin Compatibility Guide</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/InterfaceClassification.html">Interface Classification</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/filesystem/index.html">FileSystem Specification</a>
|
|
</li>
|
|
</ul>
|
|
<h5>Common</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/CLIMiniCluster.html">CLI Mini Cluster</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/FairCallQueue.html">Fair Call Queue</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/NativeLibraries.html">Native Libraries</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/Superusers.html">Proxy User</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/RackAwareness.html">Rack Awareness</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/SecureMode.html">Secure Mode</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/ServiceLevelAuth.html">Service Level Authorization</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/HttpAuthentication.html">HTTP Authentication</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/CredentialProviderAPI.html">Credential Provider API</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-kms/index.html">Hadoop KMS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/Tracing.html">Tracing</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/UnixShellGuide.html">Unix Shell Guide</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/registry/index.html">Registry</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/AsyncProfilerServlet.html">Async Profiler</a>
|
|
</li>
|
|
</ul>
|
|
<h5>HDFS</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsDesign.html">Architecture</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsUserGuide.html">User Guide</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HDFSCommands.html">Commands Reference</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HDFSHighAvailabilityWithQJM.html">NameNode HA With QJM</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HDFSHighAvailabilityWithNFS.html">NameNode HA With NFS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/ObserverNameNode.html">Observer NameNode</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/Federation.html">Federation</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/ViewFs.html">ViewFs</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/ViewFsOverloadScheme.html">ViewFsOverloadScheme</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsSnapshots.html">Snapshots</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsEditsViewer.html">Edits Viewer</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsImageViewer.html">Image Viewer</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html">Permissions and HDFS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsQuotaAdminGuide.html">Quotas and HDFS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/LibHdfs.html">libhdfs (C API)</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/WebHDFS.html">WebHDFS (REST API)</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-hdfs-httpfs/index.html">HttpFS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/ShortCircuitLocalReads.html">Short Circuit Local Reads</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/CentralizedCacheManagement.html">Centralized Cache Management</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsNfsGateway.html">NFS Gateway</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsRollingUpgrade.html">Rolling Upgrade</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/ExtendedAttributes.html">Extended Attributes</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/TransparentEncryption.html">Transparent Encryption</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsMultihoming.html">Multihoming</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/ArchivalStorage.html">Storage Policies</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/MemoryStorage.html">Memory Storage Support</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/SLGUserGuide.html">Synthetic Load Generator</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HDFSErasureCoding.html">Erasure Coding</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HDFSDiskbalancer.html">Disk Balancer</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsUpgradeDomain.html">Upgrade Domain</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsDataNodeAdminGuide.html">DataNode Admin</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs-rbf/HDFSRouterFederation.html">Router Federation</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/HdfsProvidedStorage.html">Provided Storage</a>
|
|
</li>
|
|
</ul>
|
|
<h5>MapReduce</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/MapReduceTutorial.html">Tutorial</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/MapredCommands.html">Commands Reference</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/MapReduce_Compatibility_Hadoop1_Hadoop2.html">Compatibility with 1.x</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/EncryptedShuffle.html">Encrypted Shuffle</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/PluggableShuffleAndPluggableSort.html">Pluggable Shuffle/Sort</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/DistributedCacheDeploy.html">Distributed Cache Deploy</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/SharedCacheSupport.html">Support for YARN Shared Cache</a>
|
|
</li>
|
|
</ul>
|
|
<h5>MapReduce REST APIs</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/MapredAppMasterRest.html">MR Application Master</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-hs/HistoryServerRest.html">MR History Server</a>
|
|
</li>
|
|
</ul>
|
|
<h5>YARN</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/YARN.html">Architecture</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/YarnCommands.html">Commands Reference</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/CapacityScheduler.html">Capacity Scheduler</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/FairScheduler.html">Fair Scheduler</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/ResourceManagerRestart.html">ResourceManager Restart</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/ResourceManagerHA.html">ResourceManager HA</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/ResourceModel.html">Resource Model</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/NodeLabel.html">Node Labels</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/NodeAttributes.html">Node Attributes</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/WebApplicationProxy.html">Web Application Proxy</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/TimelineServer.html">Timeline Server</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/TimelineServiceV2.html">Timeline Service V.2</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/WritingYarnApplications.html">Writing YARN Applications</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/YarnApplicationSecurity.html">YARN Application Security</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/NodeManager.html">NodeManager</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/DockerContainers.html">Running Applications in Docker Containers</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/RuncContainers.html">Running Applications in runC Containers</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/NodeManagerCgroups.html">Using CGroups</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/SecureContainer.html">Secure Containers</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/ReservationSystem.html">Reservation System</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/GracefulDecommission.html">Graceful Decommission</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/OpportunisticContainers.html">Opportunistic Containers</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/Federation.html">YARN Federation</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/SharedCache.html">Shared Cache</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/UsingGpus.html">Using GPU</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/UsingFPGA.html">Using FPGA</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/PlacementConstraints.html">Placement Constraints</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/YarnUI2.html">YARN UI2</a>
|
|
</li>
|
|
</ul>
|
|
<h5>YARN REST APIs</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/WebServicesIntro.html">Introduction</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/ResourceManagerRest.html">Resource Manager</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/NodeManagerRest.html">Node Manager</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/TimelineServer.html#Timeline_Server_REST_API_v1">Timeline Server</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/TimelineServiceV2.html#Timeline_Service_v.2_REST_API">Timeline Service V.2</a>
|
|
</li>
|
|
</ul>
|
|
<h5>YARN Service</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/yarn-service/Overview.html">Overview</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/yarn-service/QuickStart.html">QuickStart</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/yarn-service/Concepts.html">Concepts</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/yarn-service/YarnServiceAPI.html">Yarn Service API</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/yarn-service/ServiceDiscovery.html">Service Discovery</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-site/yarn-service/SystemServices.html">System Services</a>
|
|
</li>
|
|
</ul>
|
|
<h5>Hadoop Compatible File Systems</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-aliyun/tools/hadoop-aliyun/index.html">Aliyun OSS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-aws/tools/hadoop-aws/index.html">Amazon S3</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-azure/index.html">Azure Blob Storage</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-azure-datalake/index.html">Azure Data Lake Storage</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-cos/cloud-storage/index.html">Tencent COS</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-huaweicloud/cloud-storage/index.html">Huaweicloud OBS</a>
|
|
</li>
|
|
</ul>
|
|
<h5>Auth</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-auth/index.html">Overview</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-auth/Examples.html">Examples</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-auth/Configuration.html">Configuration</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-auth/BuildingIt.html">Building</a>
|
|
</li>
|
|
</ul>
|
|
<h5>Tools</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-streaming/HadoopStreaming.html">Hadoop Streaming</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-archives/HadoopArchives.html">Hadoop Archives</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-archive-logs/HadoopArchiveLogs.html">Hadoop Archive Logs</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-distcp/DistCp.html">DistCp</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-federation-balance/HDFSFederationBalance.html">HDFS Federation Balance</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-gridmix/GridMix.html">GridMix</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-rumen/Rumen.html">Rumen</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-resourceestimator/ResourceEstimator.html">Resource Estimator Service</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-sls/SchedulerLoadSimulator.html">Scheduler Load Simulator</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/Benchmarking.html">Hadoop Benchmarking</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-dynamometer/Dynamometer.html">Dynamometer</a>
|
|
</li>
|
|
</ul>
|
|
<h5>Reference</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/release/">Changelog and Release Notes</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../api/index.html">Java API docs</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/UnixShellAPI.html">Unix Shell API</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/Metrics.html">Metrics</a>
|
|
</li>
|
|
</ul>
|
|
<h5>Configuration</h5>
|
|
<ul>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/core-default.xml">core-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs/hdfs-default.xml">hdfs-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-hdfs-rbf/hdfs-rbf-default.xml">hdfs-rbf-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-mapreduce-client/hadoop-mapreduce-client-core/mapred-default.xml">mapred-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-yarn/hadoop-yarn-common/yarn-default.xml">yarn-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-kms/kms-default.html">kms-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-hdfs-httpfs/httpfs-default.html">httpfs-default.xml</a>
|
|
</li>
|
|
<li class="none">
|
|
<a href="../hadoop-project-dist/hadoop-common/DeprecatedProperties.html">Deprecated Properties</a>
|
|
</li>
|
|
</ul>
|
|
<a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
|
|
<img alt="Built by Maven" src="./images/logos/maven-feather.png"/>
|
|
</a>
|
|
|
|
</div>
|
|
</div>
|
|
<div id="bodyColumn">
|
|
<div id="contentBox">
|
|
<!---
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License. See accompanying LICENSE file.
|
|
-->
|
|
<h1>Testing the Azure WASB client</h1>
|
|
<ul>
|
|
<li><a href="#Policy_for_submitting_patches_which_affect_the_hadoop-azure_module.">Policy for submitting patches which affect the hadoop-azure module.</a>
|
|
<ul>
|
|
<li><a href="#The_submitter_of_any_patch_is_required_to_run_all_the_integration_tests_and_declare_which_Azure_region_they_used.">The submitter of any patch is required to run all the integration tests and declare which Azure region they used.</a></li>
|
|
<li><a href="#What_if_there.E2.80.99s_an_intermittent_failure_of_a_test.3F">What if there’s an intermittent failure of a test?</a></li>
|
|
<li><a href="#What_if_the_tests_are_timing_out_or_failing_over_my_network_connection.3F">What if the tests are timing out or failing over my network connection?</a></li></ul></li>
|
|
<li><a href="#Setting_up_the_tests">Setting up the tests</a></li>
|
|
<li><a href="#Testing_the_hadoop-azure_Module">Testing the hadoop-azure Module</a></li>
|
|
<li><a href="#Running_the_Tests">Running the Tests</a></li>
|
|
<li><a href="#Viewing_the_results">Viewing the results</a></li>
|
|
<li><a href="#Scale_Tests">Scale Tests</a>
|
|
<ul>
|
|
<li><a href="#Enabling_the_Scale_Tests">Enabling the Scale Tests</a></li>
|
|
<li><a href="#Scale_test_tuning_options">Scale test tuning options</a>
|
|
<ul>
|
|
<li><a href="#Scale_test_configuration_options">Scale test configuration options</a>
|
|
<ul>
|
|
<li><a href="#fs.azure.scale.test.huge.filesize:_size_in_MB_for_.E2.80.9CHuge_file_tests.E2.80.9D.">fs.azure.scale.test.huge.filesize: size in MB for “Huge file tests”.</a></li></ul></li></ul></li></ul></li>
|
|
<li><a href="#Using_the_emulator">Using the emulator</a></li>
|
|
<li><a href="#Debugging_Test_failures">Debugging Test failures</a></li>
|
|
<li><a href="#Adding_new_tests">Adding new tests</a>
|
|
<ul>
|
|
<li><a href="#Requirements_of_new_Tests">Requirements of new Tests</a>
|
|
<ul>
|
|
<li><a href="#Subclasses_Existing_Shared_Base_Classes">Subclasses Existing Shared Base Classes</a>
|
|
<ul>
|
|
<li><a href="#org.apache.hadoop.fs.azure.AbstractWasbTestWithTimeout">org.apache.hadoop.fs.azure.AbstractWasbTestWithTimeout</a></li>
|
|
<li><a href="#org.apache.hadoop.fs.azure.AbstractWasbTestBase">org.apache.hadoop.fs.azure.AbstractWasbTestBase</a></li>
|
|
<li><a href="#org.apache.hadoop.fs.azure.integration.AbstractAzureScaleTest">org.apache.hadoop.fs.azure.integration.AbstractAzureScaleTest</a></li></ul></li>
|
|
<li><a href="#Secure">Secure</a></li>
|
|
<li><a href="#Efficient_of_Time_and_Money">Efficient of Time and Money</a></li></ul></li>
|
|
<li><a href="#Works_Over_Long-haul_Links">Works Over Long-haul Links</a></li>
|
|
<li><a href="#Provides_Diagnostics_and_timing_information">Provides Diagnostics and timing information</a>
|
|
<ul>
|
|
<li><a href="#Fails_Meaningfully">Fails Meaningfully</a></li></ul></li>
|
|
<li><a href="#Cleans_Up_Afterwards">Cleans Up Afterwards</a></li>
|
|
<li><a href="#Works_Reliably">Works Reliably</a></li></ul></li>
|
|
<li><a href="#Tips">Tips</a>
|
|
<ul>
|
|
<li><a href="#How_to_keep_your_credentials_really_safe">How to keep your credentials really safe</a></li>
|
|
<li><a href="#Cleaning_up_Containers">Cleaning up Containers</a></li></ul></li>
|
|
<li><a href="#Testing_the_Azure_ABFS_Client">Testing the Azure ABFS Client</a></li>
|
|
<li><a href="#Generating_test_run_configurations_and_test_triggers_over_various_config_combinations">Generating test run configurations and test triggers over various config combinations</a></li></ul>
|
|
|
|
<p>This module includes both unit tests, which can run in isolation without connecting to the Azure Storage service, and integration tests, which require a working connection to interact with a container. Unit test suites follow the naming convention <code>Test*.java</code>. Integration tests follow the naming convention <code>ITest*.java</code>.</p><section>
|
|
<h2><a name="Policy_for_submitting_patches_which_affect_the_hadoop-azure_module."></a>Policy for submitting patches which affect the <code>hadoop-azure</code> module.</h2>
|
|
<p>The Apache Jenkins infrastucture does not run any cloud integration tests, due to the need to keep credentials secure.</p><section>
|
|
<h3><a name="The_submitter_of_any_patch_is_required_to_run_all_the_integration_tests_and_declare_which_Azure_region_they_used."></a>The submitter of any patch is required to run all the integration tests and declare which Azure region they used.</h3>
|
|
<p>This is important: <b>patches which do not include this declaration will be ignored</b></p>
|
|
<p>This policy has proven to be the only mechanism to guarantee full regression testing of code changes. Why the declaration of region? Two reasons</p>
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>It helps us identify regressions which only surface against specific endpoints.</li>
|
|
<li>It forces the submitters to be more honest about their testing. It’s easy to lie, “yes, I tested this”. To say “yes, I tested this against Azure US-west” is a more specific lie and harder to make. And, if you get caught out: you lose all credibility with the project.</li>
|
|
</ol>
|
|
<p>You don’t need to test from a VM within the Azure infrastructure, all you need are credentials.</p>
|
|
<p>It’s neither hard nor expensive to run the tests; if you can’t, there’s no guarantee your patch works. The reviewers have enough to do, and don’t have the time to do these tests, especially as every failure will simply make for a slow iterative development.</p>
|
|
<p>Please: run the tests. And if you don’t, we are sorry for declining your patch, but we have to.</p></section><section>
|
|
<h3><a name="What_if_there.E2.80.99s_an_intermittent_failure_of_a_test.3F"></a>What if there’s an intermittent failure of a test?</h3>
|
|
<p>Some of the tests do fail intermittently, especially in parallel runs. If this happens, try to run the test on its own to see if the test succeeds.</p>
|
|
<p>If it still fails, include this fact in your declaration. We know some tests are intermittently unreliable.</p></section><section>
|
|
<h3><a name="What_if_the_tests_are_timing_out_or_failing_over_my_network_connection.3F"></a>What if the tests are timing out or failing over my network connection?</h3>
|
|
<p>The tests are designed to be configurable for different timeouts. If you are seeing problems and this configuration isn’t working, that’s a sign of the configuration mechanism isn’t complete. If it’s happening in the production code, that could be a sign of a problem which may surface over long-haul connections. Please help us identify and fix these problems — especially as you are the one best placed to verify the fixes work.</p></section></section><section>
|
|
<h2><a name="Setting_up_the_tests"></a>Setting up the tests</h2></section><section>
|
|
<h2><a name="Testing_the_hadoop-azure_Module"></a>Testing the <code>hadoop-azure</code> Module</h2>
|
|
<p>The <code>hadoop-azure</code> module includes a full suite of unit tests. Many of the tests will run without additional configuration by running <code>mvn test</code>. This includes tests against mocked storage, which is an in-memory emulation of Azure Storage.</p>
|
|
<p>The integration tests are designed to test directly against an Azure storage service, and require an account and credentials in order to run.</p>
|
|
<p>This is done by creating the file to <code>src/test/resources/azure-auth-keys.xml</code> and setting the name of the storage account and its access key.</p>
|
|
<p>For example:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><?xml version="1.0"?>
|
|
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
|
|
<configuration>
|
|
<property>
|
|
<name>fs.azure.wasb.account.name</name>
|
|
<value>{ACCOUNTNAME}.blob.core.windows.net</value>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.account.key.{ACCOUNTNAME}.blob.core.windows.net</name>
|
|
<value>{ACCOUNT ACCESS KEY}</value>
|
|
</property>
|
|
</configuration>
|
|
</pre></div></div>
|
|
|
|
<p>To run contract tests, set the WASB file system URI in <code>src/test/resources/azure-auth-keys.xml</code> and the account access key. For example:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><?xml version="1.0"?>
|
|
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
|
|
<configuration>
|
|
<property>
|
|
<name>fs.contract.test.fs.wasb</name>
|
|
<value>wasb://{CONTAINERNAME}@{ACCOUNTNAME}.blob.core.windows.net</value>
|
|
<description>The name of the azure file system for testing.</description>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.account.key.{ACCOUNTNAME}.blob.core.windows.net</name>
|
|
<value>{ACCOUNT ACCESS KEY}</value>
|
|
</property>
|
|
</configuration>
|
|
</pre></div></div>
|
|
|
|
<p>Overall, to run all the tests using <code>mvn test</code>, a sample <code>azure-auth-keys.xml</code> is like following:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><?xml version="1.0"?>
|
|
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
|
|
<configuration>
|
|
<property>
|
|
<name>fs.azure.wasb.account.name</name>
|
|
<value>{ACCOUNTNAME}.blob.core.windows.net</value>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.account.key.{ACCOUNTNAME}.blob.core.windows.net</name>
|
|
<value>{ACCOUNT ACCESS KEY}</value>
|
|
</property>
|
|
<property>
|
|
<name>fs.contract.test.fs.wasb</name>
|
|
<value>wasb://{CONTAINERNAME}@{ACCOUNTNAME}.blob.core.windows.net</value>
|
|
</property>
|
|
</configuration>
|
|
</pre></div></div>
|
|
|
|
<p>DO NOT ADD <code>azure-auth-keys.xml</code> TO REVISION CONTROL. The keys to your Azure Storage account are a secret and must not be shared.</p></section><section>
|
|
<h2><a name="Running_the_Tests"></a>Running the Tests</h2>
|
|
<p>After completing the configuration, execute the test run through Maven.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C clean verify
|
|
</pre></div></div>
|
|
|
|
<p>It’s also possible to execute multiple test suites in parallel by passing the <code>parallel-tests=wasb|abfs|both</code> property on the command line. The tests spend most of their time blocked on network I/O, so running in parallel tends to complete full test runs faster.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C -Dparallel-tests=both clean verify
|
|
mvn -T 1C -Dparallel-tests=wasb clean verify
|
|
mvn -T 1C -Dparallel-tests=abfs clean verify
|
|
</pre></div></div>
|
|
|
|
<p><code>-Dparallel-tests=wasb</code> runs the WASB related integration tests from azure directory<br /> <code>-Dparallel-tests=abfs</code> runs the ABFS related integration tests from azurebfs directory<br /> <code>-Dparallel-tests=both</code> runs all the integration tests from both azure and azurebfs directory<br /></p>
|
|
<p>Some tests must run with exclusive access to the storage container, so even with the <code>parallel-tests</code> property, several test suites will run in serial in a separate Maven execution step after the parallel tests.</p>
|
|
<p>By default, <code>parallel-tests</code> runs 4 test suites concurrently. This can be tuned by passing the <code>testsThreadCount</code> property.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C -Dparallel-tests -DtestsThreadCount=8 clean verify
|
|
</pre></div></div>
|
|
<!---
|
|
To run just unit tests, which do not require Azure connectivity or credentials,
|
|
use any of the above invocations, but switch the goal to `test` instead of
|
|
`verify`.
|
|
-->
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C clean test
|
|
|
|
mvn -T 1C -Dparallel-tests clean test
|
|
|
|
mvn -T 1C -Dparallel-tests -DtestsThreadCount=8 clean test
|
|
</pre></div></div>
|
|
|
|
<p>To run only a specific named subset of tests, pass the <code>test</code> property for unit tests or the <code>it.test</code> property for integration tests.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C clean test -Dtest=TestRollingWindowAverage
|
|
|
|
mvn -T 1C clean verify -Dscale -Dit.test=ITestFileSystemOperationExceptionMessage -Dtest=none
|
|
|
|
mvn -T 1C clean verify -Dtest=none -Dit.test=ITest*
|
|
|
|
</pre></div></div>
|
|
|
|
<p>Note</p>
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>
|
|
|
|
<p>When running a specific subset of tests, the patterns passed in <code>test</code> and <code>it.test</code> override the configuration of which tests need to run in isolation in a separate serial phase (mentioned above). This can cause unpredictable results, so the recommendation is to avoid passing <code>parallel-tests</code> in combination with <code>test</code> or <code>it.test</code>. If you know that you are specifying only tests that can run safely in parallel, then it will work. For wide patterns, like <code>ITest*</code> shown above, it may cause unpredictable test failures.</p>
|
|
</li>
|
|
<li>
|
|
|
|
<p>The command line shell may try to expand the “*” and sometimes the “#” symbols in test patterns. In such situations, escape the character it with a “\” prefix. Example:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre> mvn -T 1C clean verify -Dtest=none -Dit.test=ITest\*
|
|
</pre></div></div>
|
|
</li>
|
|
</ol></section><section>
|
|
<h2><a name="Viewing_the_results"></a>Viewing the results</h2>
|
|
<p>Integration test results and logs are stored in <code>target/failsafe-reports/</code>. An HTML report can be generated during site generation, or with the <code>surefire-report</code> plugin:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre># for the unit tests
|
|
mvn -T 1C surefire-report:report-only
|
|
|
|
# for the integration tests
|
|
mvn -T 1C surefire-report:failsafe-report-only
|
|
|
|
# all reports for this module
|
|
mvn -T 1C site:site
|
|
</pre></div></div>
|
|
</section><section>
|
|
<h2><a name="Scale_Tests"></a>Scale Tests</h2>
|
|
<p>There are a set of tests designed to measure the scalability and performance at scale of the filesystem client, <i>Scale Tests</i>. Tests include: creating and traversing directory trees, uploading large files, renaming them, deleting them, seeking through the files, performing random IO, and others. This makes them a foundational part of the benchmarking.</p>
|
|
<p>By their very nature they are slow. And, as their execution time is often limited by bandwidth between the computer running the tests and the Azure endpoint, parallel execution does not speed these tests up.</p><section>
|
|
<h3><a name="Enabling_the_Scale_Tests"></a>Enabling the Scale Tests</h3>
|
|
<p>The tests are enabled if the <code>scale</code> property is set in the maven build this can be done regardless of whether or not the parallel test profile is used</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C verify -Dscale
|
|
|
|
mvn -T 1C verify -Dparallel-tests -Dscale -DtestsThreadCount=8
|
|
</pre></div></div>
|
|
|
|
<p>The most bandwidth intensive tests (those which upload data) always run sequentially; those which are slow due to HTTPS setup costs or server-side actions are included in the set of parallelized tests.</p></section><section>
|
|
<h3><a name="Scale_test_tuning_options"></a>Scale test tuning options</h3>
|
|
<p>Some of the tests can be tuned from the maven build or from the configuration file used to run the tests.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn -T 1C verify -Dparallel-tests -Dscale -DtestsThreadCount=8 -Dfs.azure.scale.test.huge.filesize=128M
|
|
</pre></div></div>
|
|
|
|
<p>The algorithm is</p>
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>The value is queried from the configuration file, using a default value if it is not set.</li>
|
|
<li>The value is queried from the JVM System Properties, where it is passed down by maven.</li>
|
|
<li>If the system property is null, an empty string, or it has the value <code>unset</code>, then the configuration value is used. The <code>unset</code> option is used to <a class="externalLink" href="http://stackoverflow.com/questions/7773134/null-versus-empty-arguments-in-maven">work round a quirk in maven property propagation</a>.</li>
|
|
</ol>
|
|
<p>Only a few properties can be set this way; more will be added.</p>
|
|
<table border="0" class="bodyTable">
|
|
<thead>
|
|
|
|
<tr class="a">
|
|
<th> Property </th>
|
|
<th> Meaninging </th></tr>
|
|
</thead><tbody>
|
|
|
|
<tr class="b">
|
|
<td> <code>fs.azure.scale.test.huge.filesize</code></td>
|
|
<td> Size for huge file uploads </td></tr>
|
|
<tr class="a">
|
|
<td> <code>fs.azure.scale.test.huge.huge.partitionsize</code></td>
|
|
<td> Size for partitions in huge file uploads </td></tr>
|
|
</tbody>
|
|
</table>
|
|
<p>The file and partition sizes are numeric values with a k/m/g/t/p suffix depending on the desired size. For example: 128M, 128m, 2G, 2G, 4T or even 1P.</p><section>
|
|
<h4><a name="Scale_test_configuration_options"></a>Scale test configuration options</h4>
|
|
<p>Some scale tests perform multiple operations (such as creating many directories).</p>
|
|
<p>The exact number of operations to perform is configurable in the option <code>scale.test.operation.count</code></p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><property>
|
|
<name>scale.test.operation.count</name>
|
|
<value>10</value>
|
|
</property>
|
|
</pre></div></div>
|
|
|
|
<p>Larger values generate more load, and are recommended when testing locally, or in batch runs.</p>
|
|
<p>Smaller values results in faster test runs, especially when the object store is a long way away.</p>
|
|
<p>Operations which work on directories have a separate option: this controls the width and depth of tests creating recursive directories. Larger values create exponentially more directories, with consequent performance impact.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><property>
|
|
<name>scale.test.directory.count</name>
|
|
<value>2</value>
|
|
</property>
|
|
</pre></div></div>
|
|
|
|
<p>DistCp tests targeting Azure support a configurable file size. The default is 10 MB, but the configuration value is expressed in KB so that it can be tuned smaller to achieve faster test runs.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><property>
|
|
<name>scale.test.distcp.file.size.kb</name>
|
|
<value>10240</value>
|
|
</property>
|
|
</pre></div></div>
|
|
|
|
<p>Azure-specific scale test properties are</p><section>
|
|
<h5><a name="fs.azure.scale.test.huge.filesize:_size_in_MB_for_.E2.80.9CHuge_file_tests.E2.80.9D."></a><code>fs.azure.scale.test.huge.filesize</code>: size in MB for “Huge file tests”.</h5>
|
|
<p>The Huge File tests validate Azure storages’s ability to handle large files —the property <code>fs.azure.scale.test.huge.filesize</code> declares the file size to use.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><property>
|
|
<name>fs.azure.scale.test.huge.filesize</name>
|
|
<value>200M</value>
|
|
</property>
|
|
</pre></div></div>
|
|
|
|
<p>Tests at this scale are slow: they are best executed from hosts running in the cloud infrastructure where the storage endpoint is based.</p></section></section></section></section><section>
|
|
<h2><a name="Using_the_emulator"></a>Using the emulator</h2>
|
|
<p>A selection of tests can run against the <a class="externalLink" href="http://msdn.microsoft.com/en-us/library/azure/hh403989.aspx">Azure Storage Emulator</a> which is a high-fidelity emulation of live Azure Storage. The emulator is sufficient for high-confidence testing. The emulator is a Windows executable that runs on a local machine.</p>
|
|
<p>To use the emulator, install Azure SDK 2.3 and start the storage emulator. Then, edit <code>src/test/resources/azure-test.xml</code> and add the following property:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><property>
|
|
<name>fs.azure.test.emulator</name>
|
|
<value>true</value>
|
|
</property>
|
|
</pre></div></div>
|
|
|
|
<p>There is a known issue when running tests with the emulator. You may see the following failure message:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>com.microsoft.windowsazure.storage.StorageException: The value for one of the HTTP headers is not in the correct format.
|
|
</pre></div></div>
|
|
|
|
<p>To resolve this, restart the Azure Emulator. Ensure it is v3.2 or later.</p></section><section>
|
|
<h2><a name="Debugging_Test_failures"></a>Debugging Test failures</h2>
|
|
<p>Logging at debug level is the standard way to provide more diagnostics output; after setting this rerun the tests</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>log4j.logger.org.apache.hadoop.fs.azure=DEBUG
|
|
</pre></div></div>
|
|
</section><section>
|
|
<h2><a name="Adding_new_tests"></a>Adding new tests</h2>
|
|
<p>New tests are always welcome. Bear in mind that we need to keep costs and test time down, which is done by</p>
|
|
<ul>
|
|
|
|
<li>Not duplicating tests.</li>
|
|
<li>Being efficient in your use of Hadoop API calls.</li>
|
|
<li>Isolating large/slow tests into the “scale” test group.</li>
|
|
<li>Designing all tests to execute in parallel (where possible).</li>
|
|
<li>Adding new probes and predicates into existing tests, albeit carefully.</li>
|
|
</ul>
|
|
<p><i>No duplication</i>: if an operation is tested elsewhere, don’t repeat it. This applies as much for metadata operations as it does for bulk IO. If a new test case is added which completely obsoletes an existing test, it is OK to cut the previous one —after showing that coverage is not worsened.</p>
|
|
<p><i>Efficient</i>: prefer the <code>getFileStatus()</code> and examining the results, rather than call to <code>exists()</code>, <code>isFile()</code>, etc.</p>
|
|
<p><i>Fail with useful information:</i> provide as much diagnostics as possible on a failure. Using <code>org.apache.hadoop.fs.contract.ContractTestUtils</code> to make assertions about the state of a filesystem helps here.</p>
|
|
<p><i>Isolating Scale tests</i>. Any test doing large amounts of IO MUST extend the class <code>AbstractAzureScaleTest</code>, so only running if <code>scale</code> is defined on a build, supporting test timeouts configurable by the user. Scale tests should also support configurability as to the actual size of objects/number of operations, so that behavior at different scale can be verified.</p>
|
|
<p><i>Designed for parallel execution</i>. A key need here is for each test suite to work on isolated parts of the filesystem. Subclasses of <code>AbstractWasbTestBase</code> SHOULD use the <code>path()</code>, <code>methodpath()</code> and <code>blobpath()</code> methods, to build isolated paths. Tests MUST NOT assume that they have exclusive access to a bucket.</p>
|
|
<p><i>Extending existing tests where appropriate</i>. This recommendation goes against normal testing best practise of “test one thing per method”. Because it is so slow to create directory trees or upload large files, we do not have that luxury. All the tests against real endpoints are integration tests where sharing test setup and teardown saves time and money.</p>
|
|
<p>A standard way to do this is to extend existing tests with some extra predicates, rather than write new tests. When doing this, make sure that the new predicates fail with meaningful diagnostics, so any new problems can be easily debugged from test logs.</p><section>
|
|
<h3><a name="Requirements_of_new_Tests"></a>Requirements of new Tests</h3>
|
|
<p>This is what we expect from new tests; they’re an extension of the normal Hadoop requirements, based on the need to work with remote servers whose use requires the presence of secret credentials, where tests may be slow, and where finding out why something failed from nothing but the test output is critical.</p><section>
|
|
<h4><a name="Subclasses_Existing_Shared_Base_Classes"></a>Subclasses Existing Shared Base Classes</h4>
|
|
<p>There are a set of base classes which should be extended for Azure tests and integration tests.</p><section>
|
|
<h5><a name="org.apache.hadoop.fs.azure.AbstractWasbTestWithTimeout"></a><code>org.apache.hadoop.fs.azure.AbstractWasbTestWithTimeout</code></h5>
|
|
<p>This extends the junit <code>Assert</code> class with thread names and timeouts, the default timeout being set in <code>AzureTestConstants.AZURE_TEST_TIMEOUT</code> to ten minutes. The thread names are set to aid analyzing the stack trace of a test: a <code>jstack</code> call can be used to</p></section><section>
|
|
<h5><a name="org.apache.hadoop.fs.azure.AbstractWasbTestBase"></a><code>org.apache.hadoop.fs.azure.AbstractWasbTestBase</code></h5>
|
|
<p>The base class for tests which use <code>AzureBlobStorageTestAccount</code> to create mock or live Azure clients; in test teardown it tries to clean up store state.</p>
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>
|
|
|
|
<p>This class requires subclasses to implement <code>createTestAccount()</code> to create a mock or real test account.</p>
|
|
</li>
|
|
<li>
|
|
|
|
<p>The configuration used to create a test account <i>should</i> be that from <code>createConfiguration()</code>; this can be extended in subclasses to tune the settings.</p>
|
|
</li>
|
|
</ol></section><section>
|
|
<h5><a name="org.apache.hadoop.fs.azure.integration.AbstractAzureScaleTest"></a><code>org.apache.hadoop.fs.azure.integration.AbstractAzureScaleTest</code></h5>
|
|
<p>This extends <code>AbstractWasbTestBase</code> for scale tests; those test which only run when <code>-Dscale</code> is used to select the “scale” profile. These tests have a timeout of 30 minutes, so as to support slow test runs.</p>
|
|
<p>Having shared base classes help reduces future maintenance. Please use them.</p></section></section><section>
|
|
<h4><a name="Secure"></a>Secure</h4>
|
|
<p>Don’t ever log credentials. The credential tests go out of their way to not provide meaningful logs or assertion messages precisely to avoid this.</p></section><section>
|
|
<h4><a name="Efficient_of_Time_and_Money"></a>Efficient of Time and Money</h4>
|
|
<p>This means efficient in test setup/teardown, and, ideally, making use of existing public datasets to save setup time and tester cost.</p>
|
|
<p>The reference example is <code>ITestAzureHugeFiles</code>:. This marks the test suite as <code>@FixMethodOrder(MethodSorters.NAME_ASCENDING)</code> then orders the test cases such that each test case expects the previous test to have completed (here: uploaded a file, renamed a file, …). This provides for independent tests in the reports, yet still permits an ordered sequence of operations. Do note the use of <code>Assume.assume()</code> to detect when the preconditions for a single test case are not met, hence, the tests become skipped, rather than fail with a trace which is really a false alarm.</p></section></section><section>
|
|
<h3><a name="Works_Over_Long-haul_Links"></a>Works Over Long-haul Links</h3>
|
|
<p>As well as making file size and operation counts scaleable, this includes making test timeouts adequate. The Scale tests make this configurable; it’s hard coded to ten minutes in <code>AbstractAzureIntegrationTest()</code>; subclasses can change this by overriding <code>getTestTimeoutMillis()</code>.</p>
|
|
<p>Equally importantly: support proxies, as some testers need them.</p></section><section>
|
|
<h3><a name="Provides_Diagnostics_and_timing_information"></a>Provides Diagnostics and timing information</h3>
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>Create logs, log things.</li>
|
|
<li>you can use <code>AbstractWasbTestBase.describe(format-string, args)</code> here; it adds some newlines so as to be easier to spot.</li>
|
|
<li>Use <code>ContractTestUtils.NanoTimer</code> to measure the duration of operations, and log the output.</li>
|
|
</ol><section>
|
|
<h4><a name="Fails_Meaningfully"></a>Fails Meaningfully</h4>
|
|
<p>The <code>ContractTestUtils</code> class contains a whole set of assertions for making statements about the expected state of a filesystem, e.g. <code>assertPathExists(FS, path)</code>, <code>assertPathDoesNotExists(FS, path)</code>, and others. These do their best to provide meaningful diagnostics on failures (e.g. directory listings, file status, …), so help make failures easier to understand.</p>
|
|
<p>At the very least, <i>do not use <code>assertTrue()</code> or <code>assertFalse()</code> without including error messages</i>.</p></section></section><section>
|
|
<h3><a name="Cleans_Up_Afterwards"></a>Cleans Up Afterwards</h3>
|
|
<p>Keeps costs down.</p>
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>Do not only cleanup if a test case completes successfully; test suite teardown must do it.</li>
|
|
<li>That teardown code must check for the filesystem and other fields being null before the cleanup. Why? If test setup fails, the teardown methods still get called.</li>
|
|
</ol></section><section>
|
|
<h3><a name="Works_Reliably"></a>Works Reliably</h3>
|
|
<p>We really appreciate this — you will too.</p></section></section><section>
|
|
<h2><a name="Tips"></a>Tips</h2><section>
|
|
<h3><a name="How_to_keep_your_credentials_really_safe"></a>How to keep your credentials really safe</h3>
|
|
<p>Although the <code>auth-keys.xml</code> file is marged as ignored in git and subversion, it is still in your source tree, and there’s always that risk that it may creep out.</p>
|
|
<p>You can avoid this by keeping your keys outside the source tree and using an absolute XInclude reference to it.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><configuration>
|
|
|
|
<include xmlns="http://www.w3.org/2001/XInclude"
|
|
href="file:///users/qe/.auth-keys.xml" />
|
|
|
|
</configuration>
|
|
</pre></div></div>
|
|
</section><section>
|
|
<h3><a name="Cleaning_up_Containers"></a>Cleaning up Containers</h3>
|
|
<p>The Azure tests create containers with the prefix <code>"wasbtests-"</code> and delete them after the test runs. If a test run is interrupted, these containers may not get deleted. There is a special test case which can be manually invoked to list and delete these, <code>CleanupTestContainers</code></p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>mvn test -Dtest=CleanupTestContainers
|
|
</pre></div></div>
|
|
|
|
<p>This will delete the containers; the output log of the test run will provide the details and summary of the operation.</p></section></section><section>
|
|
<h2><a name="Testing_the_Azure_ABFS_Client"></a>Testing the Azure ABFS Client</h2>
|
|
<p>Azure Data Lake Storage Gen 2 (ADLS Gen 2) is a set of capabilities dedicated to big data analytics, built on top of Azure Blob Storage. The ABFS and ABFSS schemes target the ADLS Gen 2 REST API, and the WASB and WASBS schemes target the Azure Blob Storage REST API. ADLS Gen 2 offers better performance and scalability. ADLS Gen 2 also offers authentication and authorization compatible with the Hadoop Distributed File System permissions model when hierarchical namespace is enabled for the storage account. Furthermore, the metadata and data produced by ADLS Gen 2 REST API can be consumed by Blob REST API, and vice versa.</p></section><section>
|
|
<h2><a name="Generating_test_run_configurations_and_test_triggers_over_various_config_combinations"></a>Generating test run configurations and test triggers over various config combinations</h2>
|
|
<p>To simplify the testing across various authentication and features combinations that are mandatory for a PR, script <code>dev-support/testrun-scripts/runtests.sh</code> should be used. Once the script is updated with relevant config settings for various test combinations, it will: 1. Auto-generate configs specific to each test combinations 2. Run tests for all combinations 3. Summarize results across all the test combination runs.</p>
|
|
<p>Below are the pre-requiste steps to follow: 1. Copy</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre> ./src/test/resources/azure-auth-keys.xml.template
|
|
TO
|
|
./src/test/resources/azure-auth-keys.xml
|
|
</pre></div></div>
|
|
|
|
<p>Update account names that should be used in the test run for HNS and non-HNS combinations in the 2 properties present in the xml (account name should be without domain part), namely</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>fs.azure.hnsTestAccountName
|
|
fs.azure.nonHnsTestAccountName
|
|
</pre></div></div>
|
|
|
|
<p>azure-auth-keys.xml is listed in .gitignore, so any accidental account name leak is prevented.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>XInclude is supported, so for extra security secrets may be
|
|
kept out of the source tree then referenced through an XInclude element:
|
|
|
|
<include xmlns="http://www.w3.org/2001/XInclude"
|
|
href="/users/self/.secrets/auth-keys.xml" />
|
|
</pre></div></div>
|
|
|
|
<ol style="list-style-type: decimal">
|
|
|
|
<li>Create account config files (one config file per account) in folder:
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>./src/test/resources/accountSettings/
|
|
</pre></div></div>
|
|
</li>
|
|
</ol>
|
|
<p>Follow the instruction in the start of the template file</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre> accountName_settings.xml.template
|
|
</pre></div></div>
|
|
|
|
<p>within accountSettings folder while creating account config file. New files created in folder accountSettings is listed in .gitignore to prevent accidental cred leaks.</p>
|
|
<p><b>To run PR validation:</b> Running command * <code>dev-support/testrun-scripts/runtests.sh</code> will prompt as below:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>Choose action:
|
|
[Note - SET_ACTIVE_TEST_CONFIG will help activate the config for IDE/single test class runs]
|
|
1) SET_ACTIVE_TEST_CONFIG 4) SET_OR_CHANGE_TEST_ACCOUNT
|
|
2) RUN_TEST 5) PRINT_LOG4J_LOG_PATHS_FROM_LAST_RUN
|
|
3) CLEAN_UP_OLD_TEST_CONTAINERS
|
|
#? 2
|
|
</pre></div></div>
|
|
|
|
<p>Enter 1: for setting active combination for IDE test run/single mvn test class runs.</p>
|
|
<p>Enter 2: for choosing the combination to choose for mvn full test suite.</p>
|
|
<p>Enter 3: For clean-up of any abruptly ending test leaving auto generated test container on the account.</p>
|
|
<p>Enter 4: To create/modify the config file that decides the account to use for specific test combination.</p>
|
|
<p>Enter 5: To print the log4j paths the last test runs.</p>
|
|
<p>On next prompt, current list of combinations to choose are provided. Sample for Run_TEST action:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre>Enter parallel test run process count [default - 8]: 4
|
|
Set the active test combination to run the action:
|
|
1) HNS-OAuth 3) nonHNS-SharedKey 5) AllCombinationsTestRun
|
|
2) HNS-SharedKey 4) AppendBlob-HNS-OAuth 6) Quit
|
|
#? 1
|
|
|
|
Combination specific property setting: [ key=fs.azure.account.auth.type , value=OAuth ]
|
|
|
|
Activated [src/test/resources/abfs-combination-test-configs.xml] - for account: snvijayacontracttest for combination HNS-OAuth
|
|
Running test for combination HNS-OAuth on account snvijayacontracttest [ProcessCount=4]
|
|
Test run report can be seen in dev-support/testlogs/2022-10-07_05-23-22/Test-Logs-HNS-OAuth.txt
|
|
</pre></div></div>
|
|
|
|
<p>Provide the option for the action chosen first.</p>
|
|
<p><b>Test logs:</b> Test runs will create a folder within dev-support/testlogs to save the test logs. Folder name will be the test start timestamp. The mvn verify command line logs for each combination will be saved into a file as Test-Logs-$combination.txt into this folder. In case of any failures, this file will have the failure exception stack. At the end of the test run, the consolidated results of all the combination runs will be saved into a file as Test-Results.log in the same folder. When run for PR validation, the consolidated test results needs to be pasted into the PR comment section.</p>
|
|
<p><b>To add a new test combination:</b> Templates for mandatory test combinations for PR validation are present in <code>dev-support/testrun-scripts/runtests.sh</code>. If a new one needs to be added, add a combination to <code>dev-support/testrun-scripts/runtests.sh</code>. (Refer to current active combinations within <code>SECTION: COMBINATION DEFINITIONS AND TRIGGER</code> and <code>SECTION: TEST COMBINATION METHODS</code> in the script).</p>
|
|
<p><b>Test Configuration Details:</b></p>
|
|
<p>Note that the ABFS tests include compatibility tests which require WASB credentials, in addition to the ABFS credentials.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><?xml version="1.0" encoding="UTF-8"?>
|
|
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
|
|
<configuration xmlns:xi="http://www.w3.org/2001/XInclude">
|
|
<property>
|
|
<name>fs.azure.abfs.account.name</name>
|
|
<value>{ACCOUNT_NAME}.dfs.core.windows.net</value>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.key.{ACCOUNT_NAME}.dfs.core.windows.net</name>
|
|
<value>{ACCOUNT_ACCESS_KEY}</value>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.wasb.account.name</name>
|
|
<value>{ACCOUNT_NAME}.blob.core.windows.net</value>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.key.{ACCOUNT_NAME}.blob.core.windows.net</name>
|
|
<value>{ACCOUNT_ACCESS_KEY}</value>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.contract.test.fs.abfs</name>
|
|
<value>abfs://{CONTAINER_NAME}@{ACCOUNT_NAME}.dfs.core.windows.net</value>
|
|
<description>A file system URI to be used by the contract tests.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.contract.test.fs.wasb</name>
|
|
<value>wasb://{CONTAINER_NAME}@{ACCOUNT_NAME}.blob.core.windows.net</value>
|
|
<description>A file system URI to be used by the contract tests.</description>
|
|
</property>
|
|
</configuration>
|
|
</pre></div></div>
|
|
|
|
<p>To run OAuth and ACL test cases you must use a storage account with the hierarchical namespace enabled, and set the following configuration settings:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><!--=========================== AUTHENTICATION OPTIONS ===================-->
|
|
<!--ATTENTION:
|
|
TO RUN ABFS & WASB COMPATIBILITY TESTS, YOU MUST SET AUTH TYPE AS SharedKey.
|
|
OAUTH IS INTRODUCED TO ABFS ONLY.-->
|
|
<property>
|
|
<name>fs.azure.account.auth.type.{YOUR_ABFS_ACCOUNT_NAME}</name>
|
|
<value>{AUTH TYPE}</value>
|
|
<description>The authorization type can be SharedKey, OAuth, Custom or SAS. The
|
|
default is SharedKey.</description>
|
|
</property>
|
|
|
|
<!--============================= FOR OAUTH ===========================-->
|
|
<!--IF AUTH TYPE IS SET AS OAUTH, FOLLOW THE STEPS BELOW-->
|
|
<!--NOTICE: AAD client and tenant related properties can be obtained through Azure Portal-->
|
|
|
|
<!--1. UNCOMMENT BELOW AND CHOOSE YOUR OAUTH PROVIDER TYPE -->
|
|
|
|
<!--
|
|
<property>
|
|
<name>fs.azure.account.oauth.provider.type.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>org.apache.hadoop.fs.azurebfs.oauth2.{Token Provider Class name}</value>
|
|
<description>The full name of token provider class name.</description>
|
|
</property>
|
|
-->
|
|
|
|
<!--2. UNCOMMENT BELOW AND SET CREDENTIALS ACCORDING TO THE PROVIDER TYPE-->
|
|
|
|
<!--2.1. If "ClientCredsTokenProvider" is set as key provider, uncomment below and
|
|
set auth endpoint, client id and secret below-->
|
|
<!--
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.endpoint.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>https://login.microsoftonline.com/{TENANTID}/oauth2/token</value>
|
|
<description>Token end point, this can be found through Azure portal</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.id.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{client id}</value>
|
|
<description>AAD client id.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.secret.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{client secret}</value>
|
|
</property>
|
|
-->
|
|
|
|
<!--2.2. If "UserPasswordTokenProvider" is set as key provider, uncomment below and
|
|
set auth endpoint, use name and password-->
|
|
<!--
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.endpoint.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>https://login.microsoftonline.com/{TENANTID}/oauth2/token</value>
|
|
<description>Token end point, this can be found through Azure portal</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.oauth2.user.name.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{user name}</value>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.oauth2.user.password.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{user password}</value>
|
|
</property>
|
|
-->
|
|
|
|
<!--2.3. If "MsiTokenProvider" is set as key provider, uncomment below and
|
|
set tenantGuid and client id.-->
|
|
<!--
|
|
<property>
|
|
<name>fs.azure.account.oauth2.msi.tenant.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{tenantGuid}</value>
|
|
<description>msi tenantGuid.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.id.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{client id}</value>
|
|
<description>AAD client id.</description>
|
|
</property>
|
|
-->
|
|
|
|
<!--2.4. If "RefreshTokenBasedTokenProvider" is set as key provider, uncomment below and
|
|
set refresh token and client id.-->
|
|
<!--
|
|
<property>
|
|
<name>fs.azure.account.oauth2.refresh.token.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{refresh token}</value>
|
|
<description>refresh token.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.id.{ABFS_ACCOUNT_NAME}</name>
|
|
<value>{client id}</value>
|
|
<description>AAD client id.</description>
|
|
</property>
|
|
-->
|
|
|
|
<!--
|
|
<property>
|
|
<name>fs.azure.identity.transformer.enable.short.name</name>
|
|
<value>true/false</value>
|
|
<description>
|
|
User principal names (UPNs) have the format “{alias}@{domain}”.
|
|
If true, only {alias} is included when a UPN would otherwise appear in the output
|
|
of APIs like getFileStatus, getOwner, getAclStatus, etc, default is false.
|
|
</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.identity.transformer.domain.name</name>
|
|
<value>domain name of the user's upn</value>
|
|
<description>
|
|
If the domain name is specified and “fs.azure.identity.transformer.enable.short.name”
|
|
is true, then the {alias} part of a UPN can be specified as input to APIs like setOwner,
|
|
setAcl, modifyAclEntries, or removeAclEntries, and it will be transformed to a UPN by appending @ and the domain specified by
|
|
this configuration property.
|
|
</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.identity.transformer.service.principal.id</name>
|
|
<value>service principal object id</value>
|
|
<description>
|
|
An Azure Active Directory object ID (oid) used as the replacement for names contained
|
|
in the list specified by “fs.azure.identity.transformer.service.principal.substitution.list”.
|
|
Notice that instead of setting oid, you can also set $superuser here.
|
|
</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.identity.transformer.skip.superuser.replacement</name>
|
|
<value>true/false</value>
|
|
<description>
|
|
If false, “$superuser” is replaced with the current user when it appears as the owner
|
|
or owning group of a file or directory. The default is false.
|
|
</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.identity.transformer.service.principal.substitution.list</name>
|
|
<value>mapred,hdfs,yarn,hive,tez</value>
|
|
<description>
|
|
A comma separated list of names to be replaced with the service principal ID specified by
|
|
“fs.azure.identity.transformer.service.principal.id”. This substitution occurs
|
|
when setOwner, setAcl, modifyAclEntries, or removeAclEntries are invoked with identities
|
|
contained in the substitution list. Notice that when in non-secure cluster, asterisk symbol *
|
|
can be used to match all user/group.
|
|
</description>
|
|
</property>
|
|
-->
|
|
|
|
</pre></div></div>
|
|
|
|
<p>To run Delegation SAS test cases you must use a storage account with the hierarchical namespace enabled and set the following configuration settings:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><!--=========================== AUTHENTICATION OPTIONS ===================-->
|
|
<!--============================= FOR SAS ===========================-->
|
|
<!-- To run ABFS Delegation SAS tests, you must register an app, create the
|
|
necessary role assignments, and set the configuration discussed below:
|
|
|
|
1) Register an app:
|
|
a) Login to https://portal.azure.com, select your AAD directory and search for app registrations.
|
|
b) Click "New registration".
|
|
c) Provide a display name, such as "abfs-app".
|
|
d) Set the account type to "Accounts in this organizational directory only ({YOUR_Tenant} only - Single tenant)".
|
|
e) For Redirect URI select Web and enter "http://localhost".
|
|
f) Click Register.
|
|
|
|
2) Create necessary role assignments:
|
|
a) Login to https://portal.azure.com and find the Storage account with hierarchical namespace enabled
|
|
that you plan to run the tests against.
|
|
b) Select "Access Control (IAM)".
|
|
c) Select Role Assignments
|
|
d) Click Add and select "Add role assignments"
|
|
e) For Role and enter "Storage Blob Data Owner".
|
|
f) Under Select enter the name of the app you registered in step 1 and select it.
|
|
g) Click Save.
|
|
h) Repeat above steps to create a second role assignment for the app but this time for
|
|
the "Storage Blob Delegator" role.
|
|
|
|
3) Generate a new client secret for the application:
|
|
a) Login to https://portal.azure.com and find the app registered in step 1.
|
|
b) Select "Certificates and secrets".
|
|
c) Click "New client secret".
|
|
d) Enter a description (eg. Secret1)
|
|
e) Set expiration period. Expires in 1 year is good.
|
|
f) Click Add
|
|
g) Copy the secret and expiration to a safe location.
|
|
|
|
4) Set the following configuration values:
|
|
-->
|
|
|
|
<property>
|
|
<name>fs.azure.sas.token.provider.type</name>
|
|
<value>org.apache.hadoop.fs.azurebfs.extensions.MockDelegationSASTokenProvider</value>
|
|
<description>The fully qualified class name of the SAS token provider implementation.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.test.app.service.principal.tenant.id</name>
|
|
<value>{TID}</value>
|
|
<description>Tenant ID for the application's service principal.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.test.app.service.principal.object.id</name>
|
|
<value>{OID}</value>
|
|
<description>Object ID for the application's service principal.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.test.app.id</name>
|
|
<value>{app id}</value>
|
|
<description>The application's ID, also known as the client id.</description>
|
|
</property>
|
|
|
|
<property>
|
|
<name>fs.azure.test.app.secret</name>
|
|
<value>{client secret}</value>
|
|
<description>The application's secret, also known as the client secret.</description>
|
|
</property>
|
|
|
|
|
|
</pre></div></div>
|
|
|
|
<p>To run CheckAccess test cases you must register an app with no RBAC and set the following configurations.</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><!--=========================== FOR CheckAccess =========================-->
|
|
<!-- To run ABFS CheckAccess SAS tests, you must register an app, with no role
|
|
assignments, and set the configuration discussed below:
|
|
|
|
1) Register a new app with no RBAC
|
|
2) As part of the test configs you need to provide the guid for the above
|
|
created app. Please follow the below steps to fetch the guid.
|
|
a) Get an access token with the above created app. Please refer the
|
|
following documentation for the same. https://docs.microsoft
|
|
.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow#get-a-token
|
|
b) Decode the token fetched with the above step. You may use https
|
|
://jwt.ms/ to decode the token
|
|
d) The oid field in the decoded string is the guid.
|
|
3) Set the following configurations:
|
|
-->
|
|
|
|
<property>
|
|
<name>fs.azure.enable.check.access</name>
|
|
<value>true</value>
|
|
<description>By default the check access will be on. Checkaccess can
|
|
be turned off by changing this flag to false.</description>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.account.test.oauth2.client.id</name>
|
|
<value>{client id}</value>
|
|
<description>The client id(app id) for the app created on step 1
|
|
</description>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.account.test.oauth2.client.secret</name>
|
|
<value>{client secret}</value>
|
|
<description>
|
|
The client secret(application's secret) for the app created on step 1
|
|
</description>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.check.access.testuser.guid</name>
|
|
<value>{guid}</value>
|
|
<description>The guid fetched on step 2</description>
|
|
</property>
|
|
<property>
|
|
<name>fs.azure.account.oauth2.client.endpoint.{account name}.dfs.core
|
|
.windows.net</name>
|
|
<value>https://login.microsoftonline.com/{TENANTID}/oauth2/token</value>
|
|
<description>
|
|
Token end point. This can be found through Azure portal. As part of CheckAccess
|
|
test cases. The access will be tested for an FS instance created with the
|
|
above mentioned client credentials. So this configuration is necessary to
|
|
create the test FS instance.
|
|
</description>
|
|
</property>
|
|
|
|
</pre></div></div>
|
|
|
|
<p>If running tests against an endpoint that uses the URL format http[s]://[ip]:[port]/[account]/[filesystem] instead of http[s]://[account][domain-suffix]/[filesystem], please use the following:</p>
|
|
|
|
<div class="source">
|
|
<div class="source">
|
|
<pre><property>
|
|
<name>fs.azure.abfs.endpoint</name>
|
|
<value>{IP}:{PORT}</value>
|
|
</property>
|
|
</pre></div></div></section>
|
|
</div>
|
|
</div>
|
|
<div class="clear">
|
|
<hr/>
|
|
</div>
|
|
<div id="footer">
|
|
<div class="xright">
|
|
© 2008-2023
|
|
Apache Software Foundation
|
|
|
|
- <a href="http://maven.apache.org/privacy-policy.html">Privacy Policy</a>.
|
|
Apache Maven, Maven, Apache, the Apache feather logo, and the Apache Maven project logos are trademarks of The Apache Software Foundation.
|
|
</div>
|
|
<div class="clear">
|
|
<hr/>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html>
|