bitflicker64 opened a new pull request, #3126: URL: https://github.com/apache/hugegraph/pull/3126
## Purpose of the PR - close #3124 Kept in sync with https://github.com/hugegraph/hugegraph/pull/173 for bot reviews. HugeGraph Server enables `HugeSecurityManager` by default. On Java 11, that makes successful DNS resolutions remain cached for the JVM lifetime unless a finite positive cache policy is configured. After a Kubernetes Store pod is replaced behind the same stable DNS name, HStore writes can therefore continue using the old pod IP until the Server process is restarted. ## Main Changes - Add a packaged Java security properties file with `networkaddress.cache.ttl=30`. - Load that file through `java.security.properties` only when `HugeSecurityManager` is enabled. - Keep security-disabled startup unchanged and preserve later operator JVM options, including an explicit security-properties override. - Add focused Java runtime and launcher coverage, wired into Server CI. The ordinary `-Dnetworkaddress.cache.ttl` system-property form is deliberately not used because Java 11 reads this setting as a security property. ## Verifying these changes - [x] Need tests and can be verified as follows: - Java 11 distribution package build: passed. - Java 11 and Java 17 security-property and launcher tests: passed. - Existing Server startup-script suite: 16 passed, 0 failed. - EditorConfig validation: passed across all modules. - Apache RAT validation for `hugegraph-dist`: passed. ## Does this PR potentially affect the following parts? - [ ] Dependencies - [x] Modify configurations - [ ] The public API - [ ] Other affects - [ ] Nope ## Documentation Status - [ ] `Doc - TODO` - [ ] `Doc - Done` - [x] `Doc - No Need` ## Out of scope - Store-client channel invalidation tracked by #3125 - HStore readiness changes - Helm chart changes -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
