[DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-04-16 Thread Nicolas Fraison
Hi All, I'd like to start a discussion to Handle TLS Certificate Renewal Please provide some feedback on this proposal: https://cwiki.apache.org/confluence/display/FLINK/FLIP-523%3A+Handle+TLS+Certificate+Renewal Regards, Nicolas Fraison

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-04-28 Thread Nicolas Fraison
> > difficult) > > > > > > (3) For the test plan: There seem to be some SSL related e2e tests: > > > > > > > > > https://github.com/apache/flink/blob/master/flink-end-to-end-tests/test-scripts/common_ssl.sh > > > It would be nice to extend them to cover this feature as well. I would > > hate > > > for this feature to slowly break by future changes, so good e2e test > > > coverage is key, in particular bc so many components are involved. > > > > > > Best, > > > Robert > > > > > > On Wed, Apr 16, 2025 at 11:55 AM Nicolas Fraison > > > wrote: > > > > > > > Hi All, > > > > > > > > I'd like to start a discussion to Handle TLS Certificate Renewal > > > > Please provide some feedback on this proposal: > > > > > > > > > > > > > > https://cwiki.apache.org/confluence/display/FLINK/FLIP-523%3A+Handle+TLS+Certificate+Renewal > > > > > > > > Regards, > > > > > > > > Nicolas Fraison > > > > > > > > > >

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-05-20 Thread Nicolas Fraison
al code path must run when no watch service asked > * Super fast event handling because million events may come in (not > expecting but we should be prepared) > * Clean separation between dir/file watch and file/dir usage > * Well considered synchronisation model > * Extensive unit

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-05-20 Thread Nicolas Fraison
reating an SSLContext decorator which checks reload first and then > forwards all calls to the original (wrapped) context > is one way to achieve that. If there are different implementations which > end up in similar behavior then it's fine. > > BR, > G > > > On T

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-06-24 Thread Nicolas Fraison
n 24, 2025 at 7:22 AM Nicolas Fraison < > nicolas.frai...@datadoghq.com> wrote: > >> Hi, >> >> This remaining part of the doc has been updated >> >> On Thu, Jun 19, 2025 at 9:37 AM Gabor Somogyi >> wrote: >> >>> I think in this SSLContextL

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-06-17 Thread Nicolas Fraison
Done On Mon, Jun 16, 2025 at 2:46 PM Gabor Somogyi wrote: > I still see 3 Callable occurrence in the FLIP... > > On Thu, Jun 12, 2025 at 2:16 PM Nicolas Fraison > wrote: > > > Hi, FLIP has been updated with last comment > > > > On Thu, Jun 5, 2025 at

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-06-02 Thread Nicolas Fraison
Hi, The FLIP has been updated. Let me know if you have some other comments. Nicolas On Tue, May 20, 2025 at 12:01 PM Nicolas Fraison < nicolas.frai...@datadoghq.com> wrote: > Hi Gabor, > > Thanks for the feedback. > The overall proposal with atomic dirty flag being set by

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-06-05 Thread Nicolas Fraison
will increase the readability heavily + no > need to touch this code later. > > BR, > G > > [1] > > https://github.com/apache/flink-kubernetes-operator/commit/e5a325c48965a50d61d0aa29e61ba79e97f27082#diff-a30b3ed9b8c53e998b15d7da7ad2e54374c98ffc3c920f76a70bce3fb37a9b2eR8

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-06-12 Thread Nicolas Fraison
gt; Callable provided. > > G > > > On Thu, Jun 5, 2025 at 2:27 PM Nicolas Fraison > wrote: > > > Hi, > > > > It indeed make sense, FLIP has been updated > > > > Nicolas > > > > On Wed, Jun 4, 2025 at 12:10 PM Gabor Somogyi > > >

Re: [DISCUSS] FLIP-523 - Handle TLS Certificate Renewal

2025-06-25 Thread Nicolas Fraison
] > > On Thu, Jun 19, 2025 at 8:14 AM Nicolas Fraison < > nicolas.frai...@datadoghq.com> wrote: > >> Hi, >> >> Which part of the doc are you referring to? >> >> On Wed, Jun 18, 2025 at 7:08 PM Gabor Somogyi >> wrote: >> >>> There is

[VOTE] FLIP-523 - Handle TLS Certificate Renewal

2025-06-30 Thread Nicolas Fraison
https://lists.apache.org/thread/9m8snbov3kn8bcz9npchgsv8wn0k33go -- Nicolas Fraison (he/him) Data Engineering Multi-Cloud DATADOG 21 Rue de Châteaudun 6th Floor, Paris, 75009 France <https://maps.google.com/?q=21%20Rue%20de%20Ch%C3%A2teaudun%206th%20Floor,%20Paris,%20%2075009%20France&g

[jira] [Created] (FLINK-32012) Operator failed to rollback due to missing HA metadata

2023-05-05 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-32012: --- Summary: Operator failed to rollback due to missing HA metadata Key: FLINK-32012 URL: https://issues.apache.org/jira/browse/FLINK-32012 Project: Flink

[jira] [Created] (FLINK-32334) Operator failed to create taskmanager deployment because it already exist

2023-06-14 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-32334: --- Summary: Operator failed to create taskmanager deployment because it already exist Key: FLINK-32334 URL: https://issues.apache.org/jira/browse/FLINK-32334

[jira] [Created] (FLINK-32551) Provide the possibility to have a savepoint taken by the operator when deleting a flinkdeployment

2023-07-06 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-32551: --- Summary: Provide the possibility to have a savepoint taken by the operator when deleting a flinkdeployment Key: FLINK-32551 URL: https://issues.apache.org/jira/browse/FLINK

[jira] [Created] (FLINK-32890) Flink app rolled back with old savepoints (3 hours back in time) while some checkpoints have been taken in between

2023-08-17 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-32890: --- Summary: Flink app rolled back with old savepoints (3 hours back in time) while some checkpoints have been taken in between Key: FLINK-32890 URL: https://issues.apache.org

[jira] [Created] (FLINK-32973) Documentation for kubernetes.operator.job.savepoint-on-deletion indicate that it can be set on per resource level while it can't

2023-08-28 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-32973: --- Summary: Documentation for kubernetes.operator.job.savepoint-on-deletion indicate that it can be set on per resource level while it can't Key: FLINK-32973 URL:

[jira] [Created] (FLINK-33125) Upgrade JOSDK to 4.4.4

2023-09-20 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-33125: --- Summary: Upgrade JOSDK to 4.4.4 Key: FLINK-33125 URL: https://issues.apache.org/jira/browse/FLINK-33125 Project: Flink Issue Type: Bug

[jira] [Created] (FLINK-33222) Operator rollback app when it should not

2023-10-09 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-33222: --- Summary: Operator rollback app when it should not Key: FLINK-33222 URL: https://issues.apache.org/jira/browse/FLINK-33222 Project: Flink Issue Type

[jira] [Created] (FLINK-33797) Flink application FAILED log in info instead of warn

2023-12-11 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-33797: --- Summary: Flink application FAILED log in info instead of warn Key: FLINK-33797 URL: https://issues.apache.org/jira/browse/FLINK-33797 Project: Flink

[jira] [Created] (FLINK-12869) Add yarn acls capability to flink containers

2019-06-17 Thread Nicolas Fraison (JIRA)
Nicolas Fraison created FLINK-12869: --- Summary: Add yarn acls capability to flink containers Key: FLINK-12869 URL: https://issues.apache.org/jira/browse/FLINK-12869 Project: Flink Issue

[jira] [Created] (FLINK-31812) SavePoint from /jars/:jarid:/run api on body is not anymore emptyToNull if empty

2023-04-14 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-31812: --- Summary: SavePoint from /jars/:jarid:/run api on body is not anymore emptyToNull if empty Key: FLINK-31812 URL: https://issues.apache.org/jira/browse/FLINK-31812

[jira] [Created] (FLINK-34131) Checkpoint check window should take in account checkpoint job configuration

2024-01-17 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-34131: --- Summary: Checkpoint check window should take in account checkpoint job configuration Key: FLINK-34131 URL: https://issues.apache.org/jira/browse/FLINK-34131

[jira] [Created] (FLINK-35489) Add capability to set min taskmanager.memory.managed.size when enabling autotuning

2024-05-30 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-35489: --- Summary: Add capability to set min taskmanager.memory.managed.size when enabling autotuning Key: FLINK-35489 URL: https://issues.apache.org/jira/browse/FLINK-35489

[jira] [Created] (FLINK-37504) Handle TLS Certificate Renewal

2025-03-18 Thread Nicolas Fraison (Jira)
Nicolas Fraison created FLINK-37504: --- Summary: Handle TLS Certificate Renewal Key: FLINK-37504 URL: https://issues.apache.org/jira/browse/FLINK-37504 Project: Flink Issue Type: Improvement