[
https://issues.apache.org/jira/browse/HADOOP-19352?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18062091#comment-18062091
]
ASF GitHub Bot commented on HADOOP-19352:
-----------------------------------------
zhouaoe commented on PR #7205:
URL: https://github.com/apache/hadoop/pull/7205#issuecomment-3983354956
> @drankye @zhouaoe @cnauroth @steveloughran I identified some dependency
issues druing integrating Hadoop 3.5.0 RC0 with Spark
>
> in this PR, the dependency `com.aliyun.oss:aliyun-sdk-oss` is upgraded
from 3.13.2 to 3.18.1, it pulls new transitive deps, should LICENSE/NOTICE be
updated?
>
> * aliyun-java-core-0.2.11-beta.jar
> * dom4j-2.1.4.jar
> * java-trace-api-0.2.11-beta.jar
> * opentelemetry-api-1.49.0.jar
> * opentelemetry-context-1.49.0.jar
> * reactive-streams-1.0.3.jar
>
> and, there are two `beta` version deps, which might cause stability
concerns for users and downstream projects, are those deps necessary or
optional? could it be replaced with a stable version?
>
> additionally,
[HADOOP-19696](https://issues.apache.org/jira/browse/HADOOP-19696) (fixed in
3.5.0, 3.4.3) changes the binary distribution layout, a connector with a lot of
transitive deps may introduce potential complexity and cause class conflicts
issue, so it would be good if that `aliyun-sdk-oss` can provide a shaded
version, then hadoop and downstream projects won't fall into dependency hall.
Received. I will start optimizing immediately.
> Hadoop OSS Connector adds support for V4 signatures.
> ----------------------------------------------------
>
> Key: HADOOP-19352
> URL: https://issues.apache.org/jira/browse/HADOOP-19352
> Project: Hadoop Common
> Issue Type: Improvement
> Components: fs/oss
> Reporter: zhouao
> Assignee: zhouao
> Priority: Major
> Labels: pull-request-available
>
> AliyunOSS is about to adjust its security policy: only V4 signature requests
> will be supported in the public cloud. Therefore, support for V4 signatures
> is also required in Hadoop, and V4 signatures will be the default.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
