[IMPALA-5263] support CA bundles when running stress test against SSL'd Impala

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 2.9.0
• Fix Version/s: Impala 2.10.0
• Component/s: Infrastructure
• Epic Color: ghx-label-4
• Assignee: Michael Brown
• Reporter: Michael Brown
• Created: 28/Apr/17 21:03
• Updated: 14/Jun/17 16:22
• Resolved: 14/Jun/17 16:22

Description

When running the stress test against an SSL'd Impala cluster, if the cluster has self-signed certificates the KerberosClient and requests library we use to query the Impala Web interface will fail. To get around that, I've set verify=False for the request Session. However, requests seems to support a CA bundle. If we can find a way to automate grabbing this CA bundle, we can try to remove verify=False here and use the bundle instead.