| /** |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| */ |
| package org.apache.pulsar.io; |
| |
| import static org.apache.commons.lang3.StringUtils.isNotBlank; |
| import static org.mockito.Mockito.spy; |
| |
| import com.google.common.collect.Lists; |
| import com.google.common.collect.Sets; |
| |
| import java.lang.reflect.Method; |
| import java.net.URL; |
| import java.util.Collections; |
| import java.util.HashMap; |
| import java.util.HashSet; |
| import java.util.Map; |
| import java.util.Optional; |
| import java.util.Set; |
| |
| import org.apache.pulsar.broker.PulsarService; |
| import org.apache.pulsar.broker.ServiceConfiguration; |
| import org.apache.pulsar.broker.ServiceConfigurationUtils; |
| import org.apache.pulsar.broker.authentication.AuthenticationProviderTls; |
| import org.apache.pulsar.broker.loadbalance.impl.SimpleLoadManagerImpl; |
| import org.apache.pulsar.client.admin.BrokerStats; |
| import org.apache.pulsar.client.admin.PulsarAdmin; |
| import org.apache.pulsar.client.api.Authentication; |
| import org.apache.pulsar.client.api.ClientBuilder; |
| import org.apache.pulsar.client.api.PulsarClient; |
| import org.apache.pulsar.client.impl.auth.AuthenticationTls; |
| import org.apache.pulsar.common.policies.data.ClusterData; |
| import org.apache.pulsar.common.policies.data.ClusterDataImpl; |
| import org.apache.pulsar.common.policies.data.TenantInfo; |
| import org.apache.pulsar.common.policies.data.TenantInfoImpl; |
| import org.apache.pulsar.common.util.ObjectMapperFactory; |
| import org.apache.pulsar.functions.runtime.thread.ThreadRuntimeFactory; |
| import org.apache.pulsar.functions.runtime.thread.ThreadRuntimeFactoryConfig; |
| import org.apache.pulsar.functions.worker.PulsarWorkerService; |
| import org.apache.pulsar.functions.worker.WorkerConfig; |
| import org.apache.pulsar.functions.worker.WorkerService; |
| import org.apache.pulsar.zookeeper.LocalBookkeeperEnsemble; |
| import org.slf4j.Logger; |
| import org.slf4j.LoggerFactory; |
| import org.testng.annotations.AfterMethod; |
| import org.testng.annotations.BeforeMethod; |
| import org.testng.annotations.Test; |
| |
| /** |
| * Test Pulsar sink on function |
| */ |
| @Test(groups = "broker-io") |
| public class PulsarFunctionAdminTest { |
| LocalBookkeeperEnsemble bkEnsemble; |
| |
| ServiceConfiguration config; |
| WorkerConfig workerConfig; |
| URL urlTls; |
| PulsarService pulsar; |
| PulsarAdmin admin; |
| PulsarClient pulsarClient; |
| BrokerStats brokerStatsClient; |
| PulsarWorkerService functionsWorkerService; |
| final String tenant = "external-repl-prop"; |
| String pulsarFunctionsNamespace = tenant + "/pulsar-function-admin"; |
| String primaryHost; |
| |
| private final String TLS_SERVER_CERT_FILE_PATH = "./src/test/resources/authentication/tls/broker-cert.pem"; |
| private final String TLS_SERVER_KEY_FILE_PATH = "./src/test/resources/authentication/tls/broker-key.pem"; |
| private final String TLS_CLIENT_CERT_FILE_PATH = "./src/test/resources/authentication/tls/client-cert.pem"; |
| private final String TLS_CLIENT_KEY_FILE_PATH = "./src/test/resources/authentication/tls/client-key.pem"; |
| |
| private static final Logger log = LoggerFactory.getLogger(PulsarFunctionAdminTest.class); |
| |
| @BeforeMethod(alwaysRun = true) |
| void setup(Method method) throws Exception { |
| |
| log.info("--- Setting up method {} ---", method.getName()); |
| |
| // Start local bookkeeper ensemble |
| bkEnsemble = new LocalBookkeeperEnsemble(3, 0, () -> 0); |
| bkEnsemble.start(); |
| |
| config = spy(ServiceConfiguration.class); |
| config.setClusterName("use"); |
| Set<String> superUsers = Sets.newHashSet("superUser", "admin"); |
| config.setSuperUserRoles(superUsers); |
| config.setWebServicePort(Optional.of(0)); |
| config.setWebServicePortTls(Optional.of(0)); |
| config.setZookeeperServers("127.0.0.1" + ":" + bkEnsemble.getZookeeperPort()); |
| config.setBrokerShutdownTimeoutMs(0L); |
| config.setBrokerServicePort(Optional.of(0)); |
| config.setBrokerServicePortTls(Optional.of(0)); |
| config.setLoadManagerClassName(SimpleLoadManagerImpl.class.getName()); |
| |
| |
| Set<String> providers = new HashSet<>(); |
| providers.add(AuthenticationProviderTls.class.getName()); |
| config.setAuthenticationEnabled(true); |
| config.setAuthenticationProviders(providers); |
| config.setTlsCertificateFilePath(TLS_SERVER_CERT_FILE_PATH); |
| config.setTlsKeyFilePath(TLS_SERVER_KEY_FILE_PATH); |
| config.setTlsAllowInsecureConnection(true); |
| |
| |
| functionsWorkerService = createPulsarFunctionWorker(config); |
| Optional<WorkerService> functionWorkerService = Optional.of(functionsWorkerService); |
| pulsar = new PulsarService(config, workerConfig, functionWorkerService, (exitCode) -> {}); |
| pulsar.start(); |
| urlTls = new URL(pulsar.getBrokerServiceUrlTls()); |
| |
| Map<String, String> authParams = new HashMap<>(); |
| authParams.put("tlsCertFile", TLS_CLIENT_CERT_FILE_PATH); |
| authParams.put("tlsKeyFile", TLS_CLIENT_KEY_FILE_PATH); |
| Authentication authTls = new AuthenticationTls(); |
| authTls.configure(authParams); |
| |
| admin = spy( |
| PulsarAdmin.builder() |
| .serviceHttpUrl(pulsar.getWebServiceAddressTls()) |
| .tlsTrustCertsFilePath(TLS_CLIENT_CERT_FILE_PATH) |
| .allowTlsInsecureConnection(true) |
| .authentication(authTls) |
| .build()); |
| |
| brokerStatsClient = admin.brokerStats(); |
| primaryHost = pulsar.getWebServiceAddress(); |
| |
| // update cluster metadata |
| ClusterData clusterData = ClusterData.builder().serviceUrl(urlTls.toString()).build(); |
| admin.clusters().updateCluster(config.getClusterName(), clusterData); |
| |
| ClientBuilder clientBuilder = PulsarClient.builder().serviceUrl(this.workerConfig.getPulsarServiceUrl()); |
| if (isNotBlank(workerConfig.getBrokerClientAuthenticationPlugin()) |
| && isNotBlank(workerConfig.getBrokerClientAuthenticationParameters())) { |
| clientBuilder.enableTls(workerConfig.isUseTls()); |
| clientBuilder.allowTlsInsecureConnection(workerConfig.isTlsAllowInsecureConnection()); |
| clientBuilder.authentication(workerConfig.getBrokerClientAuthenticationPlugin(), |
| workerConfig.getBrokerClientAuthenticationParameters()); |
| } |
| if (pulsarClient != null) { |
| pulsarClient.close(); |
| } |
| pulsarClient = clientBuilder.build(); |
| |
| TenantInfo propAdmin = TenantInfo.builder() |
| .allowedClusters(Collections.singleton("use")) |
| .build(); |
| admin.tenants().updateTenant(tenant, propAdmin); |
| |
| Thread.sleep(100); |
| } |
| |
| @AfterMethod(alwaysRun = true) |
| void shutdown() throws Exception { |
| log.info("--- Shutting down ---"); |
| pulsarClient.close(); |
| admin.close(); |
| functionsWorkerService.stop(); |
| pulsar.close(); |
| bkEnsemble.stop(); |
| } |
| |
| private PulsarWorkerService createPulsarFunctionWorker(ServiceConfiguration config) { |
| workerConfig = new WorkerConfig(); |
| workerConfig.setPulsarFunctionsNamespace(pulsarFunctionsNamespace); |
| workerConfig.setSchedulerClassName( |
| org.apache.pulsar.functions.worker.scheduler.RoundRobinScheduler.class.getName()); |
| workerConfig.setFunctionRuntimeFactoryClassName(ThreadRuntimeFactory.class.getName()); |
| workerConfig.setFunctionRuntimeFactoryConfigs( |
| ObjectMapperFactory.getThreadLocal().convertValue(new ThreadRuntimeFactoryConfig().setThreadGroupName("use"), Map.class)); |
| // worker talks to local broker |
| workerConfig.setPulsarServiceUrl("pulsar://127.0.0.1:" + config.getBrokerServicePortTls().get()); |
| workerConfig.setPulsarWebServiceUrl("https://127.0.0.1:" + config.getWebServicePortTls().get()); |
| workerConfig.setFailureCheckFreqMs(100); |
| workerConfig.setNumFunctionPackageReplicas(1); |
| workerConfig.setClusterCoordinationTopicName("coordinate"); |
| workerConfig.setFunctionAssignmentTopicName("assignment"); |
| workerConfig.setFunctionMetadataTopicName("metadata"); |
| workerConfig.setInstanceLivenessCheckFreqMs(100); |
| workerConfig.setWorkerPort(0); |
| workerConfig.setPulsarFunctionsCluster(config.getClusterName()); |
| String hostname = ServiceConfigurationUtils.getDefaultOrConfiguredAddress(config.getAdvertisedAddress()); |
| workerConfig.setWorkerHostname(hostname); |
| workerConfig |
| .setWorkerId("c-" + config.getClusterName() + "-fw-" + hostname + "-" + workerConfig.getWorkerPort()); |
| |
| workerConfig.setBrokerClientAuthenticationPlugin(AuthenticationTls.class.getName()); |
| workerConfig.setBrokerClientAuthenticationParameters( |
| String.format("tlsCertFile:%s,tlsKeyFile:%s", TLS_CLIENT_CERT_FILE_PATH, TLS_CLIENT_KEY_FILE_PATH)); |
| workerConfig.setUseTls(true); |
| workerConfig.setTlsAllowInsecureConnection(true); |
| workerConfig.setTlsTrustCertsFilePath(TLS_CLIENT_CERT_FILE_PATH); |
| |
| PulsarWorkerService workerService = new PulsarWorkerService(); |
| workerService.init(workerConfig, null, false); |
| return workerService; |
| } |
| } |