[IMPALA-11642] Make postgresql jar a test-only dependency of Impala java build

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: Impala 4.2.0
• Component/s: Frontend
• Epic Color: ghx-label-6
• Assignee: Unassigned
• Reporter: Joe McDonnell
• Created: 06/Oct/22 21:59
• Updated: 06/Oct/22 21:59

Description

The Impala java build has a dependency on the org.postgresql.postgresql jar:

 

    <!-- https://mvnrepository.com/artifact/org.postgresql/postgresql -->
    <dependency>
      <groupId>org.postgresql</groupId>
      <artifactId>postgresql</artifactId>
      <version>${postgres.jdbc.version}</version>
    </dependency>

This is strictly for testing purposes. Impala doesn't need to ship this jar. Since there are regular CVEs in this postgresql jar requiring remediation, we should stop shipping the jar. That would involve making this dependency have the "test" scope and then fixing up this logic that references the current location (which will change with the scope change):

# Hive looks for jar files in a single directory from HIVE_AUX_JARS_PATH plus
# any jars in AUX_CLASSPATH. (Or a list of jars in HIVE_AUX_JARS_PATH.)
# The Postgres JDBC driver is downloaded by maven when building the frontend.
# Export the location of Postgres JDBC driver so Ranger can pick it up.
export POSTGRES_JDBC_DRIVER="${IMPALA_FE_DIR}/target/dependency/postgresql-${IMPALA_POSTGRES_JDBC_DRIVER_VERSION}.jar"