Skip to content

test: Fix SNI validation failures with Druid 35.0.1#787

Merged
dervoeti merged 2 commits intomainfrom
fix/druid-35-sni-validation
Feb 3, 2026
Merged

test: Fix SNI validation failures with Druid 35.0.1#787
dervoeti merged 2 commits intomainfrom
fix/druid-35-sni-validation

Conversation

@dervoeti
Copy link
Member

@dervoeti dervoeti commented Feb 2, 2026

Description

Druid 35.0.1 introduced strict SNI host checking (enabled by default) as part of the Jetty 12 upgrade. Test scripts were using short hostnames (e.g., druid-coordinator-default-headless) which don't match the TLS certificates that contain only FQDNs (e.g., *.svc.cluster.local), causing "HTTP ERROR 400 Invalid SNI" failures.

This fixes test failures for all Druid 35.0.1 tests that use TLS.

This test failed before on my local machine, with the fix from this PR it works:

--- PASS: kuttl/harness/ingestion-s3-ext_druid-latest-35.0.1_zookeeper-latest-3.9.4_hadoop-3.4.2_openshift-false (326.11s)

Definition of Done Checklist

  • Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
  • Please make sure all these things are done and tick the boxes

Author

  • Changes are OpenShift compatible
  • CRD changes approved
  • CRD documentation for all fields, following the style guide.
  • Helm chart can be installed and deployed operator works
  • Integration tests passed (for non trivial changes)
  • Changes need to be "offline" compatible
  • Links to generated (nightly) docs added
  • Release note snippet added

Reviewer

  • Code contains useful comments
  • Code contains useful logging statements
  • (Integration-)Test cases added
  • Documentation added or updated. Follows the style guide.
  • Changelog updated
  • Cargo.toml only contains references to git tags (not specific commits or branches)

Acceptance

  • Feature Tracker has been updated
  • Proper release label has been added
  • Links to generated (nightly) docs added
  • Release note snippet added
  • Add type/deprecation label & add to the deprecation schedule
  • Add type/experimental label & add to the experimental features tracker

@dervoeti dervoeti moved this to Development: Waiting for Review in Stackable Engineering Feb 2, 2026
@dervoeti dervoeti self-assigned this Feb 2, 2026
@Techassi Techassi moved this from Development: Waiting for Review to Development: In Review in Stackable Engineering Feb 3, 2026
@dervoeti dervoeti added this pull request to the merge queue Feb 3, 2026
@dervoeti dervoeti moved this from Development: In Review to Development: Done in Stackable Engineering Feb 3, 2026
Merged via the queue into main with commit aaa46bc Feb 3, 2026
10 checks passed
@dervoeti dervoeti deleted the fix/druid-35-sni-validation branch February 3, 2026 12:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Development: Done

Development

Successfully merging this pull request may close these issues.

2 participants