props =
+ HiveConfigBuilder.getHadoopCoreSite(hiveCluster.getSpec());
+
+ return new ConfigMapBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .addToData("core-site.xml", HadoopXmlBuilder.buildXml(props))
+ .build();
+ }
+
+ /** Returns the ConfigMap resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-hadoop-config";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveDependentResource.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveDependentResource.java
new file mode 100644
index 000000000000..88ad8032c2c1
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveDependentResource.java
@@ -0,0 +1,426 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import io.fabric8.kubernetes.api.model.Affinity;
+import io.fabric8.kubernetes.api.model.AffinityBuilder;
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.ContainerBuilder;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.EnvVarBuilder;
+import io.fabric8.kubernetes.api.model.HasMetadata;
+import io.fabric8.kubernetes.api.model.Quantity;
+import io.fabric8.kubernetes.api.model.ResourceRequirements;
+import io.fabric8.kubernetes.api.model.Probe;
+import io.fabric8.kubernetes.api.model.ProbeBuilder;
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.ResourceRequirementsBuilder;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeBuilder;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+import io.fabric8.kubernetes.api.model.VolumeMountBuilder;
+import io.fabric8.kubernetes.client.KubernetesClientException;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.processing.dependent.Matcher;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.CRUDKubernetesDependentResource;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.spec.DatabaseConfig;
+import org.apache.hive.kubernetes.operator.model.spec.ResourceRequirementsSpec;
+
+import org.apache.hive.kubernetes.operator.model.spec.SecretKeyRef;
+import org.apache.hive.kubernetes.operator.model.spec.ProbeSpec;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+/**
+ * Base class for all Hive operator dependent resources.
+ *
+ * Overrides {@link #getSecondaryResource} to use this dependent's own
+ * event source instead of the generic type-based lookup. This is
+ * required because JOSDK's default implementation calls
+ * {@code context.getSecondaryResource(type)} which throws when
+ * multiple dependents manage the same Kubernetes resource type
+ * (e.g. multiple ConfigMap or Service dependents).
+ */
+public abstract class HiveDependentResource
+ extends CRUDKubernetesDependentResource {
+
+ private static final Logger LOG =
+ LoggerFactory.getLogger(HiveDependentResource.class);
+
+ protected static final String CONF_MOUNT_PATH = "/etc/hive/conf";
+ protected static final String HIVE_CONF_DIR = "/opt/hive/conf";
+ protected static final String EXT_JARS_PATH = "/tmp/ext-jars";
+
+ protected HiveDependentResource(Class resourceType) {
+ super(resourceType);
+ }
+
+ /**
+ * Catches 409 AlreadyExists during resource creation caused by
+ * informer lag — the resource exists on the API server but
+ * the informer cache hasn't indexed it yet, so JOSDK calls
+ * create directly.
+ */
+ @Override
+ protected R handleCreate(R desired, P primary, Context context) {
+ try {
+ return super.handleCreate(desired, primary, context);
+ } catch (KubernetesClientException e) {
+ if (e.getCode() == 409) {
+ LOG.info("Resource {} already exists (informer lag), "
+ + "will reconcile on next event",
+ desired.getMetadata().getName());
+ return desired;
+ }
+ throw e;
+ }
+ }
+
+ @Override
+ public Optional getSecondaryResource(P primary,
+ Context context) {
+ return eventSource()
+ .flatMap(es -> es.getSecondaryResource(primary));
+ }
+
+ /**
+ * Jobs and PVCs are immutable after creation — Kubernetes rejects
+ * any PUT that modifies spec.selector, spec.template (Job) or
+ * spec.resources/accessModes (PVC). Short-circuit the match to
+ * prevent the framework from attempting updates on these resources.
+ */
+ @Override
+ public Matcher.Result match(R actualResource, R desired,
+ P primary, Context context) {
+ if (actualResource != null) {
+ String kind = actualResource.getKind();
+ if ("Job".equals(kind)
+ || "PersistentVolumeClaim".equals(kind)) {
+ return Matcher.Result.nonComputed(true);
+ }
+ }
+ return super.match(actualResource, desired, primary, context);
+ }
+
+ /**
+ * Computes a SHA-256 hash of the given input strings.
+ * Used to annotate pod templates so that config changes trigger rolling updates.
+ */
+ protected static String sha256(String... inputs) {
+ try {
+ MessageDigest digest = MessageDigest.getInstance("SHA-256");
+ for (String input : inputs) {
+ if (input != null) {
+ digest.update(input.getBytes(StandardCharsets.UTF_8));
+ }
+ }
+ byte[] hash = digest.digest();
+ StringBuilder sb = new StringBuilder(64);
+ for (byte b : hash) {
+ sb.append(String.format("%02x", b));
+ }
+ return sb.toString();
+ } catch (Exception e) {
+ return "unknown";
+ }
+ }
+
+ /**
+ * Builds the database connection env vars: DB_DRIVER, DBPASSWORD
+ * (from SecretKeyRef), and SERVICE_OPTS with javax.jdo connection
+ * properties. Shared by MetastoreDeploymentDependent and
+ * SchemaInitJobDependent.
+ */
+ protected static List buildDbEnvVars(DatabaseConfig db) {
+ List envVars = new ArrayList<>();
+ envVars.add(new EnvVar("DB_DRIVER", db.type(), null));
+
+ // DBPASSWORD must be defined before SERVICE_OPTS so that
+ // Kubernetes $(DBPASSWORD) interpolation resolves correctly.
+ SecretKeyRef passwordRef = db.passwordSecretRef();
+ if (passwordRef != null) {
+ envVars.add(new EnvVarBuilder()
+ .withName("DBPASSWORD")
+ .withNewValueFrom()
+ .withNewSecretKeyRef()
+ .withName(passwordRef.name())
+ .withKey(passwordRef.key())
+ .endSecretKeyRef()
+ .endValueFrom()
+ .build());
+ }
+
+ StringBuilder serviceOpts = new StringBuilder();
+ if (db.url() != null) {
+ serviceOpts.append("-Djavax.jdo.option.ConnectionURL=")
+ .append(db.url());
+ }
+ if (db.driver() != null) {
+ serviceOpts.append(" -Djavax.jdo.option.ConnectionDriverName=")
+ .append(db.driver());
+ }
+ if (db.username() != null) {
+ serviceOpts.append(" -Djavax.jdo.option.ConnectionUserName=")
+ .append(db.username());
+ }
+ if (passwordRef != null) {
+ serviceOpts.append(
+ " -Djavax.jdo.option.ConnectionPassword=$(DBPASSWORD)");
+ }
+ if (!serviceOpts.isEmpty()) {
+ envVars.add(new EnvVar("SERVICE_OPTS",
+ serviceOpts.toString().trim(), null));
+ }
+ return envVars;
+ }
+
+
+ /** Builds a projected Volume merging multiple ConfigMaps. */
+ protected static Volume buildProjectedConfigVolume(
+ String volumeName, String... configMapNames) {
+ List
+ projections = new ArrayList<>();
+ for (String cmName : configMapNames) {
+ projections.add(
+ new io.fabric8.kubernetes.api.model.VolumeProjectionBuilder()
+ .withNewConfigMap().withName(cmName).endConfigMap()
+ .build());
+ }
+ return new VolumeBuilder()
+ .withName(volumeName)
+ .withNewProjected()
+ .withSources(projections)
+ .endProjected()
+ .build();
+ }
+
+
+ /**
+ * Populates volume mounts and volumes for the Metastore pod spec
+ * (shared by MetastoreDeploymentDependent and SchemaInitJobDependent).
+ * Adds the projected hive-config volume (merging metastore + hadoop
+ * ConfigMaps). External JARs (JDBC driver + global externalJars)
+ * should be handled separately via {@link #addExternalJars}.
+ */
+ protected static void buildMetastoreVolumes(
+ HiveCluster hiveCluster,
+ List volumeMounts,
+ List volumes) {
+
+ volumeMounts.add(new VolumeMountBuilder()
+ .withName("hive-config")
+ .withMountPath(CONF_MOUNT_PATH).build());
+
+ volumes.add(buildProjectedConfigVolume("hive-config",
+ MetastoreConfigMapDependent.resourceName(hiveCluster),
+ HadoopConfigMapDependent.resourceName(hiveCluster)));
+ }
+
+ /** Builds Kubernetes ResourceRequirements from the operator's spec. */
+ protected static ResourceRequirements buildResources(ResourceRequirementsSpec spec) {
+ if (spec == null) {
+ return new ResourceRequirements();
+ }
+ ResourceRequirementsBuilder builder = new ResourceRequirementsBuilder();
+ if (spec.requestsCpu() != null) {
+ builder.addToRequests("cpu", new Quantity(spec.requestsCpu()));
+ }
+ if (spec.requestsMemory() != null) {
+ builder.addToRequests("memory", new Quantity(spec.requestsMemory()));
+ }
+ if (spec.limitsCpu() != null) {
+ builder.addToLimits("cpu", new Quantity(spec.limitsCpu()));
+ }
+ if (spec.limitsMemory() != null) {
+ builder.addToLimits("memory", new Quantity(spec.limitsMemory()));
+ }
+ return builder.build();
+ }
+
+ /**
+ * Sets a preferred pod anti-affinity on the pod spec if no affinity is
+ * already defined. This spreads replicas across nodes while allowing
+ * future user-defined affinity to take precedence.
+ */
+ protected static void applySpreadAffinityIfAbsent(
+ io.fabric8.kubernetes.api.model.PodSpec podSpec,
+ Map selectorLabels) {
+ if (podSpec.getAffinity() != null) {
+ return;
+ }
+ podSpec.setAffinity(new AffinityBuilder()
+ .withNewPodAntiAffinity()
+ .addNewPreferredDuringSchedulingIgnoredDuringExecution()
+ .withWeight(100)
+ .withNewPodAffinityTerm()
+ .withNewLabelSelector()
+ .withMatchLabels(selectorLabels)
+ .endLabelSelector()
+ .withTopologyKey("kubernetes.io/hostname")
+ .endPodAffinityTerm()
+ .endPreferredDuringSchedulingIgnoredDuringExecution()
+ .endPodAntiAffinity()
+ .build());
+ }
+
+ /**
+ * Builds an init container that downloads external JARs via wget
+ * (for http/https URLs) or hadoop fs (for HDFS/cloud paths).
+ */
+ protected static Container buildExternalJarsInitContainer(
+ String image, List externalJars,
+ List envVars, List volumeMounts,
+ String containerName) {
+
+ // Determine target directory from the first volume mount
+ String targetDir = volumeMounts.get(0).getMountPath();
+
+ StringBuilder cmd = new StringBuilder();
+ cmd.append("export HADOOP_CONF_DIR=").append(CONF_MOUNT_PATH).append(" && ");
+
+ for (String jarUrl : externalJars) {
+ if (jarUrl.startsWith("http://") || jarUrl.startsWith("https://")) {
+ cmd.append("wget -q --tries=3 --waitretry=5 -P ").append(targetDir)
+ .append(" '").append(jarUrl).append("' && ");
+ } else {
+ cmd.append("{ ok=0; for i in 1 2 3; do hadoop fs -copyToLocal '").append(jarUrl)
+ .append("' ").append(targetDir).append("/ && ok=1 && break || sleep 5; done; ")
+ .append("[ $ok -eq 1 ]; } && ");
+ }
+ }
+ cmd.append("echo 'All external JARs downloaded successfully.'");
+
+ return new ContainerBuilder()
+ .withName(containerName)
+ .withImage(image)
+ .withCommand("/bin/bash", "-c", cmd.toString())
+ .withEnv(envVars)
+ .withVolumeMounts(volumeMounts)
+ .build();
+ }
+
+ /**
+ * Replaces the directory-level CONF_MOUNT_PATH volume mount with
+ * individual subPath mounts into HIVE_CONF_DIR (/opt/hive/conf/).
+ *
+ * This avoids the broken-symlink problem: Kubernetes projected volumes
+ * use internal timestamped directories that rotate on ConfigMap updates.
+ * The Hive Docker entrypoint symlinks resolved paths (not the stable
+ * {@code ..data/} link), so symlinks break when the directory rotates.
+ * subPath mounts place files directly without symlink indirection.
+ *
+ * Call this AFTER {@code addGlobalExternalJars} so the init container
+ * can still find the CONF_MOUNT_PATH mount.
+ */
+ protected static void replaceConfMountWithSubPaths(
+ List volumeMounts, String volumeName,
+ String... fileNames) {
+ volumeMounts.removeIf(
+ vm -> vm.getMountPath().equals(CONF_MOUNT_PATH));
+ for (String file : fileNames) {
+ volumeMounts.add(new VolumeMountBuilder()
+ .withName(volumeName)
+ .withMountPath(HIVE_CONF_DIR + "/" + file)
+ .withSubPath(file)
+ .build());
+ }
+ }
+
+
+ /**
+ * Adds external JAR download init container, volume, and
+ * volume mount. Downloads to /tmp/ext-jars so the native
+ * Hive entrypoint.sh automatically copies them to $HIVE_HOME/lib.
+ */
+ protected static void addExternalJars(
+ String image,
+ List jars,
+ List initContainers,
+ List volumeMounts,
+ List volumes,
+ List envVars) {
+ if (jars == null || jars.isEmpty()) {
+ return;
+ }
+
+ VolumeMount extMount = new VolumeMountBuilder()
+ .withName("ext-jars")
+ .withMountPath(EXT_JARS_PATH).build();
+
+ // Add volume mount for the main container
+ volumeMounts.add(extMount);
+
+ // Add emptyDir volume
+ volumes.add(new VolumeBuilder()
+ .withName("ext-jars")
+ .withNewEmptyDir().endEmptyDir().build());
+
+ // Build init container with config mount + ext-jars mount
+ List initMounts = new ArrayList<>();
+ initMounts.add(extMount);
+ for (VolumeMount vm : volumeMounts) {
+ if (vm.getMountPath().equals(CONF_MOUNT_PATH)) {
+ initMounts.add(vm);
+ break;
+ }
+ }
+
+ initContainers.add(
+ buildExternalJarsInitContainer(image, jars,
+ envVars, initMounts, "download-ext-jars"));
+ }
+
+ /**
+ * Builds a TCP socket probe using user-provided overrides or fallback defaults.
+ */
+ protected static Probe buildTcpProbe(int port, ProbeSpec spec, int defaultInitialDelay, int defaultPeriod,
+ int defaultFailureThreshold) {
+
+ int initialDelay =
+ (spec != null && spec.initialDelaySeconds() != null) ? spec.initialDelaySeconds() : defaultInitialDelay;
+ int period = (spec != null && spec.periodSeconds() != null) ? spec.periodSeconds() : defaultPeriod;
+ int failureThreshold =
+ (spec != null && spec.failureThreshold() != null) ? spec.failureThreshold() : defaultFailureThreshold;
+
+ ProbeBuilder builder = new ProbeBuilder()
+ .withNewTcpSocket()
+ .withPort(new IntOrString(port))
+ .endTcpSocket()
+ .withInitialDelaySeconds(initialDelay)
+ .withPeriodSeconds(period)
+ .withFailureThreshold(failureThreshold);
+
+ if (spec != null && spec.timeoutSeconds() != null) {
+ builder.withTimeoutSeconds(spec.timeoutSeconds());
+ }
+ if (spec != null && spec.successThreshold() != null) {
+ builder.withSuccessThreshold(spec.successThreshold());
+ }
+ return builder.build();
+ }
+
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2ConfigMapDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2ConfigMapDependent.java
new file mode 100644
index 000000000000..9bb0597cc960
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2ConfigMapDependent.java
@@ -0,0 +1,72 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.ConfigMap;
+import io.fabric8.kubernetes.api.model.ConfigMapBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the hive-site.xml ConfigMap for HiveServer2. */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=hiveserver2,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class HiveServer2ConfigMapDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "hiveserver2";
+
+ public HiveServer2ConfigMapDependent() {
+ super(ConfigMap.class);
+ }
+
+ @Override
+ protected ConfigMap desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveClusterSpec spec = hiveCluster.getSpec();
+
+ Map props =
+ HiveConfigBuilder.getHiveServer2HiveSite(hiveCluster, spec);
+ Map tezProps = HiveConfigBuilder.getTezSite(spec);
+
+ return new ConfigMapBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .addToData("hive-site.xml", HadoopXmlBuilder.buildXml(props))
+ .addToData("tez-site.xml", HadoopXmlBuilder.buildXml(tezProps))
+ .build();
+ }
+
+ /** Returns the ConfigMap resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-hiveserver2-config";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2DeploymentDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2DeploymentDependent.java
new file mode 100644
index 000000000000..1455ca0f7591
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2DeploymentDependent.java
@@ -0,0 +1,237 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.ContainerPort;
+import io.fabric8.kubernetes.api.model.ContainerPortBuilder;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.Probe;
+import io.fabric8.kubernetes.api.model.apps.Deployment;
+import io.fabric8.kubernetes.api.model.apps.DeploymentBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.model.spec.HiveServer2Spec;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the Kubernetes Deployment for HiveServer2. */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=hiveserver2,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class HiveServer2DeploymentDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "hiveserver2";
+ private static final String SCRATCH_MOUNT_PATH = "/opt/hive/scratch";
+
+ public HiveServer2DeploymentDependent() {
+ super(Deployment.class);
+ }
+
+ @Override
+ protected Deployment desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveClusterSpec spec = hiveCluster.getSpec();
+ HiveServer2Spec hs2 = spec.hiveServer2();
+ Map selectorLabels =
+ Labels.selectorForComponent(hiveCluster, COMPONENT);
+
+ List envVars = new ArrayList<>();
+ envVars.add(new EnvVar("SERVICE_NAME", "hiveserver2", null));
+ envVars.add(new EnvVar("IS_RESUME", "true", null));
+ envVars.add(new EnvVar("TEZ_AM_EXTERNAL_ID",
+ "tez-session-hs2", null));
+
+ // User-provided env vars (storage credentials, etc.)
+ if (spec.envVars() != null) {
+ envVars.addAll(spec.envVars());
+ }
+
+ // Env vars consumed by the Hive Docker entrypoint.sh to
+ // configure Tez execution mode at container startup.
+ if (spec.tezAm().isEnabled()) {
+ envVars.add(new EnvVar("HIVE_SERVER2_TEZ_USE_EXTERNAL_SESSIONS",
+ "true", null));
+ envVars.add(new EnvVar("TEZ_FRAMEWORK_MODE",
+ "STANDALONE_ZOOKEEPER", null));
+ envVars.add(new EnvVar("HIVE_ZOOKEEPER_QUORUM",
+ spec.zookeeper().quorum(), null));
+ }
+
+ if (spec.llap().isEnabled()) {
+ envVars.add(new EnvVar("HIVE_LLAP_DAEMON_SERVICE_HOSTS",
+ spec.llap().serviceHosts(), null));
+ }
+
+ String metastoreUri = spec.metastore().isEnabled() ?
+ "thrift://" + hiveCluster.getMetadata().getName() + "-metastore:9083" :
+ spec.metastore().externalUri();
+ StringBuilder serviceOpts = new StringBuilder();
+ if (metastoreUri != null && !metastoreUri.isEmpty()) {
+ serviceOpts.append("-Dhive.metastore.uris=").append(metastoreUri);
+ }
+ if (spec.llap().isEnabled()) {
+ serviceOpts.append(" -Dhive.execution.mode=llap");
+ serviceOpts.append(" -Dhive.llap.daemon.service.hosts=")
+ .append(spec.llap().serviceHosts());
+ }
+ if (spec.tezAm().isEnabled()) {
+ serviceOpts.append(" -Dhive.zookeeper.quorum=")
+ .append(spec.zookeeper().quorum());
+ }
+ envVars.add(new EnvVar("SERVICE_OPTS",
+ serviceOpts.toString(), null));
+
+ List ports = List.of(
+ new ContainerPortBuilder()
+ .withName("thrift")
+ .withContainerPort(hs2.thriftPort()).build(),
+ new ContainerPortBuilder()
+ .withName("webui")
+ .withContainerPort(hs2.webUiPort()).build()
+ );
+
+ Probe readinessProbe = buildTcpProbe(hs2.thriftPort(), hs2.readinessProbe(), 15, 10, 3);
+ Probe livenessProbe = buildTcpProbe(hs2.thriftPort(), hs2.livenessProbe(), 120, 30, 10);
+
+ boolean tezAmEnabled = spec.tezAm().isEnabled();
+
+ // Build volume mounts and volumes lists up front so the
+ // Deployment is constructed in a single builder chain.
+ // Using editFirstContainer() caused JOSDK SSA comparison
+ // mismatches that triggered infinite reconciliation loops.
+ List volumeMounts =
+ new ArrayList<>();
+ volumeMounts.add(new io.fabric8.kubernetes.api.model.VolumeMountBuilder()
+ .withName("hive-config").withMountPath(CONF_MOUNT_PATH).build());
+
+ List volumes =
+ new ArrayList<>();
+ volumes.add(buildProjectedConfigVolume("hive-config",
+ HiveServer2ConfigMapDependent.resourceName(hiveCluster),
+ HadoopConfigMapDependent.resourceName(hiveCluster)));
+
+ if (tezAmEnabled) {
+ volumeMounts.add(
+ new io.fabric8.kubernetes.api.model.VolumeMountBuilder()
+ .withName("scratch")
+ .withMountPath(SCRATCH_MOUNT_PATH).build());
+ volumes.add(new io.fabric8.kubernetes.api.model.VolumeBuilder()
+ .withName("scratch")
+ .withNewPersistentVolumeClaim()
+ .withClaimName(ScratchPvcDependent
+ .resourceName(hiveCluster))
+ .endPersistentVolumeClaim()
+ .build());
+ }
+
+ List initContainers = new ArrayList<>();
+ List allJars = new ArrayList<>();
+ if (spec.externalJars() != null) {
+ allJars.addAll(spec.externalJars());
+ }
+ if (hs2.externalJars() != null) {
+ allJars.addAll(hs2.externalJars());
+ }
+ addExternalJars(spec.image(), allJars,
+ initContainers, volumeMounts, volumes, envVars);
+ replaceConfMountWithSubPaths(volumeMounts, "hive-config",
+ "hive-site.xml", "tez-site.xml", "core-site.xml");
+
+ // Pre-compute config hash for the pod template annotation.
+ // This ensures the Deployment is created with the correct hash
+ // from the start (single ReplicaSet) and triggers rolling
+ // updates when ConfigMap content changes.
+ String configHash = sha256(
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getHiveServer2HiveSite(hiveCluster, spec)),
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getTezSite(spec)),
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getHadoopCoreSite(spec)));
+
+ Deployment deployment = new DeploymentBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withReplicas(hs2.replicas())
+ .withNewSelector()
+ .withMatchLabels(selectorLabels)
+ .endSelector()
+ .withNewTemplate()
+ .withNewMetadata()
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .addToAnnotations("kubectl.kubernetes.io/default-container", "hiveserver2")
+ .addToAnnotations("hive.apache.org/config-hash", configHash)
+ .endMetadata()
+ .withNewSpec()
+ .withInitContainers(initContainers)
+ .addNewContainer()
+ .withName("hiveserver2")
+ .withImage(spec.image())
+ .withImagePullPolicy(spec.imagePullPolicy())
+ .withEnv(envVars)
+ .withPorts(ports)
+ .withReadinessProbe(readinessProbe)
+ .withLivenessProbe(livenessProbe)
+ .withResources(buildResources(hs2.resources()))
+ .withVolumeMounts(volumeMounts)
+ .endContainer()
+ .withVolumes(volumes)
+ .endSpec()
+ .endTemplate()
+ .endSpec()
+ .build();
+
+ applySpreadAffinityIfAbsent(
+ deployment.getSpec().getTemplate().getSpec(), selectorLabels);
+
+ if (spec.volumes() != null) {
+ deployment.getSpec().getTemplate().getSpec().getVolumes().addAll(spec.volumes());
+ }
+ if (spec.volumeMounts() != null) {
+ deployment.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(spec.volumeMounts());
+ }
+ if (hs2.extraVolumes() != null) {
+ deployment.getSpec().getTemplate().getSpec().getVolumes().addAll(hs2.extraVolumes());
+ }
+ if (hs2.extraVolumeMounts() != null) {
+ deployment.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(hs2.extraVolumeMounts());
+ }
+
+ return deployment;
+ }
+
+ /** Returns the Deployment resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-hiveserver2";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2ServiceDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2ServiceDependent.java
new file mode 100644
index 000000000000..e67ff8289e5f
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/HiveServer2ServiceDependent.java
@@ -0,0 +1,72 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.Service;
+import io.fabric8.kubernetes.api.model.ServiceBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.spec.HiveServer2Spec;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the Kubernetes Service for HiveServer2 (Thrift and WebUI ports). */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=hiveserver2,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class HiveServer2ServiceDependent
+ extends HiveDependentResource {
+
+ public HiveServer2ServiceDependent() {
+ super(Service.class);
+ }
+
+ @Override
+ protected Service desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveServer2Spec hs2 = hiveCluster.getSpec().hiveServer2();
+
+ return new ServiceBuilder()
+ .withNewMetadata()
+ .withName(hiveCluster.getMetadata().getName() + "-hiveserver2")
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster,
+ HiveServer2DeploymentDependent.COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withType(hs2.serviceType())
+ .withSelector(Labels.selectorForComponent(hiveCluster,
+ HiveServer2DeploymentDependent.COMPONENT))
+ .addNewPort()
+ .withName("thrift")
+ .withPort(hs2.thriftPort())
+ .withTargetPort(new IntOrString(hs2.thriftPort()))
+ .endPort()
+ .addNewPort()
+ .withName("webui")
+ .withPort(hs2.webUiPort())
+ .withTargetPort(new IntOrString(hs2.webUiPort()))
+ .endPort()
+ .endSpec()
+ .build();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapConfigMapDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapConfigMapDependent.java
new file mode 100644
index 000000000000..2ad6955dadb8
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapConfigMapDependent.java
@@ -0,0 +1,68 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.ConfigMap;
+import io.fabric8.kubernetes.api.model.ConfigMapBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the llap-daemon-site.xml ConfigMap for LLAP daemons. */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=llap,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class LlapConfigMapDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "llap";
+
+ public LlapConfigMapDependent() {
+ super(ConfigMap.class);
+ }
+
+ @Override
+ protected ConfigMap desired(HiveCluster hiveCluster,
+ Context context) {
+ Map props =
+ HiveConfigBuilder.getLlapDaemonSite(hiveCluster.getSpec());
+
+ return new ConfigMapBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .addToData("llap-daemon-site.xml",
+ HadoopXmlBuilder.buildXml(props))
+ .build();
+ }
+
+ /** Returns the ConfigMap resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-llap-config";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapServiceDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapServiceDependent.java
new file mode 100644
index 000000000000..108f29347a97
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapServiceDependent.java
@@ -0,0 +1,77 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.Service;
+import io.fabric8.kubernetes.api.model.ServiceBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/**
+ * Manages the headless Kubernetes Service for LLAP daemons.
+ * Required by the StatefulSet for stable DNS entries and ZooKeeper registration.
+ */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=llap,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class LlapServiceDependent
+ extends HiveDependentResource {
+
+ public LlapServiceDependent() {
+ super(Service.class);
+ }
+
+ @Override
+ protected Service desired(HiveCluster hiveCluster,
+ Context context) {
+ return new ServiceBuilder()
+ .withNewMetadata()
+ .withName(hiveCluster.getMetadata().getName() + "-llap")
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster,
+ LlapStatefulSetDependent.COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withClusterIP("None")
+ .withSelector(Labels.selectorForComponent(hiveCluster,
+ LlapStatefulSetDependent.COMPONENT))
+ .addNewPort()
+ .withName("management")
+ .withPort(15004)
+ .withTargetPort(new IntOrString(15004))
+ .endPort()
+ .addNewPort()
+ .withName("shuffle")
+ .withPort(15551)
+ .withTargetPort(new IntOrString(15551))
+ .endPort()
+ .addNewPort()
+ .withName("web")
+ .withPort(15002)
+ .withTargetPort(new IntOrString(15002))
+ .endPort()
+ .endSpec()
+ .build();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapStatefulSetDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapStatefulSetDependent.java
new file mode 100644
index 000000000000..c8c044d22ce9
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/LlapStatefulSetDependent.java
@@ -0,0 +1,183 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.ContainerPort;
+import io.fabric8.kubernetes.api.model.ContainerPortBuilder;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.Probe;
+import io.fabric8.kubernetes.api.model.apps.StatefulSet;
+import io.fabric8.kubernetes.api.model.apps.StatefulSetBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.model.spec.LlapSpec;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/**
+ * Manages the Kubernetes StatefulSet for LLAP daemons.
+ * Uses StatefulSet for stable pod identities required by ZooKeeper registration.
+ */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=llap,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class LlapStatefulSetDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "llap";
+
+ public LlapStatefulSetDependent() {
+ super(StatefulSet.class);
+ }
+
+ @Override
+ protected StatefulSet desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveClusterSpec spec = hiveCluster.getSpec();
+ LlapSpec llap = spec.llap();
+ Map selectorLabels =
+ Labels.selectorForComponent(hiveCluster, COMPONENT);
+
+ List envVars = new ArrayList<>();
+ envVars.add(new EnvVar("SERVICE_NAME", "llap", null));
+ envVars.add(new EnvVar("IS_RESUME", "true", null));
+ envVars.add(new EnvVar("LLAP_MEMORY_MB",
+ String.valueOf(llap.memoryMb()), null));
+ envVars.add(new EnvVar("LLAP_EXECUTORS",
+ String.valueOf(llap.executors()), null));
+ envVars.add(new EnvVar("HIVE_ZOOKEEPER_QUORUM",
+ spec.zookeeper().quorum(), null));
+ envVars.add(new EnvVar("HIVE_LLAP_DAEMON_SERVICE_HOSTS",
+ llap.serviceHosts(), null));
+
+ // User-provided env vars (storage credentials, etc.)
+ if (spec.envVars() != null) {
+ envVars.addAll(spec.envVars());
+ }
+
+ List ports = List.of(
+ new ContainerPortBuilder()
+ .withName("management").withContainerPort(15004).build(),
+ new ContainerPortBuilder()
+ .withName("shuffle").withContainerPort(15551).build(),
+ new ContainerPortBuilder()
+ .withName("web").withContainerPort(15002).build(),
+ new ContainerPortBuilder()
+ .withName("output").withContainerPort(15003).build()
+ );
+
+ Probe readinessProbe = buildTcpProbe(15004, llap.readinessProbe(), 15, 10, 3);
+
+ String headlessServiceName =
+ hiveCluster.getMetadata().getName() + "-llap";
+
+ List volumeMounts =
+ new ArrayList<>();
+ volumeMounts.add(new io.fabric8.kubernetes.api.model.VolumeMountBuilder()
+ .withName("llap-config")
+ .withMountPath(CONF_MOUNT_PATH).build());
+
+ List volumes =
+ new ArrayList<>();
+ volumes.add(buildProjectedConfigVolume("llap-config",
+ LlapConfigMapDependent.resourceName(hiveCluster),
+ HadoopConfigMapDependent.resourceName(hiveCluster)));
+
+ List initContainers = new ArrayList<>();
+ addExternalJars(spec.image(), spec.externalJars(),
+ initContainers, volumeMounts, volumes, envVars);
+ replaceConfMountWithSubPaths(volumeMounts, "llap-config",
+ "llap-daemon-site.xml", "core-site.xml");
+
+ // Pre-compute config hash for the pod template annotation.
+ String configHash = sha256(
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getLlapDaemonSite(spec)),
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getHadoopCoreSite(spec)));
+
+ StatefulSet statefulSet = new StatefulSetBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withReplicas(llap.replicas())
+ .withServiceName(headlessServiceName)
+ .withNewSelector()
+ .withMatchLabels(selectorLabels)
+ .endSelector()
+ .withNewTemplate()
+ .withNewMetadata()
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .addToAnnotations("kubectl.kubernetes.io/default-container", "llap")
+ .addToAnnotations("hive.apache.org/config-hash", configHash)
+ .endMetadata()
+ .withNewSpec()
+ .withInitContainers(initContainers)
+ .addNewContainer()
+ .withName("llap")
+ .withImage(spec.image())
+ .withImagePullPolicy(spec.imagePullPolicy())
+ .withEnv(envVars)
+ .withPorts(ports)
+ .withReadinessProbe(readinessProbe)
+ .withResources(buildResources(llap.resources()))
+ .withVolumeMounts(volumeMounts)
+ .endContainer()
+ .withVolumes(volumes)
+ .endSpec()
+ .endTemplate()
+ .endSpec()
+ .build();
+
+ applySpreadAffinityIfAbsent(
+ statefulSet.getSpec().getTemplate().getSpec(), selectorLabels);
+
+ if (spec.volumes() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getVolumes().addAll(spec.volumes());
+ }
+ if (spec.volumeMounts() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(spec.volumeMounts());
+ }
+ if (llap.extraVolumes() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getVolumes().addAll(llap.extraVolumes());
+ }
+ if (llap.extraVolumeMounts() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(llap.extraVolumeMounts());
+ }
+ return statefulSet;
+ }
+
+ /** Returns the StatefulSet resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-llap";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreConfigMapDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreConfigMapDependent.java
new file mode 100644
index 000000000000..b429335f76e0
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreConfigMapDependent.java
@@ -0,0 +1,67 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.ConfigMap;
+import io.fabric8.kubernetes.api.model.ConfigMapBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the metastore-site.xml ConfigMap for the Hive Metastore. */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=metastore,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class MetastoreConfigMapDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "metastore";
+
+ public MetastoreConfigMapDependent() {
+ super(ConfigMap.class);
+ }
+
+ @Override
+ protected ConfigMap desired(HiveCluster hiveCluster,
+ Context context) {
+ Map props =
+ HiveConfigBuilder.getMetastoreSite(hiveCluster.getSpec());
+
+ return new ConfigMapBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .addToData("metastore-site.xml", HadoopXmlBuilder.buildXml(props))
+ .build();
+ }
+
+ /** Returns the ConfigMap resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-metastore-config";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreDeploymentDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreDeploymentDependent.java
new file mode 100644
index 000000000000..e40b9add097c
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreDeploymentDependent.java
@@ -0,0 +1,173 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.ContainerPort;
+import io.fabric8.kubernetes.api.model.ContainerPortBuilder;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.Probe;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+import io.fabric8.kubernetes.api.model.apps.Deployment;
+import io.fabric8.kubernetes.api.model.apps.DeploymentBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.model.spec.DatabaseConfig;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the Kubernetes Deployment for the Hive Metastore. */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=metastore,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class MetastoreDeploymentDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "metastore";
+
+ public MetastoreDeploymentDependent() {
+ super(Deployment.class);
+ }
+
+ @Override
+ protected Deployment desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveClusterSpec spec = hiveCluster.getSpec();
+ DatabaseConfig db = spec.metastore().database();
+ Map selectorLabels =
+ Labels.selectorForComponent(hiveCluster, COMPONENT);
+
+ List envVars = new ArrayList<>();
+ envVars.add(new EnvVar("SERVICE_NAME", "metastore", null));
+ envVars.add(new EnvVar("IS_RESUME", "true", null));
+ envVars.addAll(buildDbEnvVars(db));
+ if (spec.envVars() != null) {
+ envVars.addAll(spec.envVars());
+ }
+
+ List ports = List.of(
+ new ContainerPortBuilder()
+ .withName("thrift").withContainerPort(9083).build(),
+ new ContainerPortBuilder()
+ .withName("rest").withContainerPort(9001).build()
+ );
+
+ Probe readinessProbe = buildTcpProbe(9083, spec.metastore().readinessProbe(), 15, 10, 3);
+ Probe livenessProbe = buildTcpProbe(9083, spec.metastore().livenessProbe(), 60, 30, 5);
+
+ List initContainers = new ArrayList<>();
+ List volumeMounts = new ArrayList<>();
+ List volumes = new ArrayList<>();
+ buildMetastoreVolumes(hiveCluster, volumeMounts, volumes);
+
+ // Merge JDBC driver JAR with global externalJars into one list
+ List allJars = new ArrayList<>();
+ if (db.driverJarUrl() != null) {
+ allJars.add(db.driverJarUrl());
+ }
+ if (spec.externalJars() != null) {
+ allJars.addAll(spec.externalJars());
+ }
+ addExternalJars(spec.image(), allJars,
+ initContainers, volumeMounts, volumes, envVars);
+ // Replace directory mount with subPath mounts to avoid
+ // broken symlinks from K8s ConfigMap rotation.
+ replaceConfMountWithSubPaths(volumeMounts, "hive-config",
+ "metastore-site.xml", "core-site.xml");
+
+ // Pre-compute config hash for the pod template annotation.
+ // This ensures the Deployment is created with the correct hash
+ // from the start (single ReplicaSet) and triggers rolling
+ // updates when ConfigMap content changes.
+ String configHash = sha256(
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getMetastoreSite(spec)),
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getHadoopCoreSite(spec)));
+
+ Deployment deployment = new DeploymentBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withReplicas(spec.metastore().replicas())
+ .withNewSelector()
+ .withMatchLabels(selectorLabels)
+ .endSelector()
+ .withNewTemplate()
+ .withNewMetadata()
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .addToAnnotations("kubectl.kubernetes.io/default-container", "metastore")
+ .addToAnnotations("hive.apache.org/config-hash", configHash)
+ .endMetadata()
+ .withNewSpec()
+ .withInitContainers(initContainers)
+ .addNewContainer()
+ .withName("metastore")
+ .withImage(spec.image())
+ .withImagePullPolicy(spec.imagePullPolicy())
+ .withEnv(envVars)
+ .withPorts(ports)
+ .withReadinessProbe(readinessProbe)
+ .withLivenessProbe(livenessProbe)
+ .withResources(buildResources(
+ spec.metastore().resources()))
+ .withVolumeMounts(volumeMounts)
+ .endContainer()
+ .withVolumes(volumes)
+ .endSpec()
+ .endTemplate()
+ .endSpec()
+ .build();
+
+ applySpreadAffinityIfAbsent(
+ deployment.getSpec().getTemplate().getSpec(), selectorLabels);
+
+ if (spec.volumes() != null) {
+ deployment.getSpec().getTemplate().getSpec().getVolumes().addAll(spec.volumes());
+ }
+ if (spec.volumeMounts() != null) {
+ deployment.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(spec.volumeMounts());
+ }
+ if (spec.metastore().extraVolumes() != null) {
+ deployment.getSpec().getTemplate().getSpec().getVolumes().addAll(spec.metastore().extraVolumes());
+ }
+ if (spec.metastore().extraVolumeMounts() != null) {
+ deployment.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(spec.metastore().extraVolumeMounts());
+ }
+ return deployment;
+ }
+
+ /** Returns the Deployment resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-metastore";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreServiceDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreServiceDependent.java
new file mode 100644
index 000000000000..fff9ccf4d490
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/MetastoreServiceDependent.java
@@ -0,0 +1,69 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import io.fabric8.kubernetes.api.model.IntOrString;
+import io.fabric8.kubernetes.api.model.Service;
+import io.fabric8.kubernetes.api.model.ServiceBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/** Manages the Kubernetes Service for the Hive Metastore (Thrift + REST ports). */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=metastore,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class MetastoreServiceDependent
+ extends HiveDependentResource {
+
+ public MetastoreServiceDependent() {
+ super(Service.class);
+ }
+
+ @Override
+ protected Service desired(HiveCluster hiveCluster,
+ Context context) {
+ return new ServiceBuilder()
+ .withNewMetadata()
+ .withName(hiveCluster.getMetadata().getName() + "-metastore")
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster,
+ MetastoreDeploymentDependent.COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withType("ClusterIP")
+ .withSelector(Labels.selectorForComponent(hiveCluster,
+ MetastoreDeploymentDependent.COMPONENT))
+ .addNewPort()
+ .withName("thrift")
+ .withPort(9083)
+ .withTargetPort(new IntOrString(9083))
+ .endPort()
+ .addNewPort()
+ .withName("rest")
+ .withPort(9001)
+ .withTargetPort(new IntOrString(9001))
+ .endPort()
+ .endSpec()
+ .build();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/SchemaInitJobDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/SchemaInitJobDependent.java
new file mode 100644
index 000000000000..a23c0c477436
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/SchemaInitJobDependent.java
@@ -0,0 +1,146 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+import io.fabric8.kubernetes.api.model.batch.v1.Job;
+import io.fabric8.kubernetes.api.model.batch.v1.JobBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.model.spec.DatabaseConfig;
+import org.apache.hive.kubernetes.operator.model.spec.SecretKeyRef;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/**
+ * Manages the Kubernetes Job that initializes or upgrades the Hive Metastore
+ * database schema using schematool.
+ */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=schema-init,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class SchemaInitJobDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "schema-init";
+
+ public SchemaInitJobDependent() {
+ super(Job.class);
+ }
+
+ @Override
+ protected Job desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveClusterSpec spec = hiveCluster.getSpec();
+ DatabaseConfig db = spec.metastore().database();
+
+ List envVars = new ArrayList<>();
+ envVars.add(new EnvVar("SERVICE_NAME", "metastore", null));
+ envVars.add(new EnvVar("IS_RESUME", "false", null));
+ envVars.add(new EnvVar("HIVE_CUSTOM_CONF_DIR",
+ CONF_MOUNT_PATH, null));
+ envVars.addAll(buildDbEnvVars(db));
+
+ SecretKeyRef passwordRef = db.passwordSecretRef();
+ boolean hasDriverJar = db.driverJarUrl() != null;
+
+ // This Job runs schematool directly (not via the entrypoint),
+ // so we must replicate the entrypoint's config setup:
+ // 1. Symlink custom config files into HIVE_CONF_DIR
+ // 2. Set HADOOP_CLIENT_OPTS to pass SERVICE_OPTS as JVM args
+ // 3. Copy JDBC driver jar if downloaded by init container
+ StringBuilder cmd = new StringBuilder();
+ cmd.append("export HIVE_CONF_DIR=$HIVE_HOME/conf && ");
+ cmd.append("if [ -d \"${HIVE_CUSTOM_CONF_DIR:-}\" ]; then ");
+ cmd.append("find \"${HIVE_CUSTOM_CONF_DIR}\" -type f -exec ");
+ cmd.append("ln -sfn {} \"${HIVE_CONF_DIR}\"/ \\; ; ");
+ cmd.append("export HADOOP_CONF_DIR=$HIVE_CONF_DIR; fi && ");
+ cmd.append("export HADOOP_CLIENT_OPTS="
+ + "\"${HADOOP_CLIENT_OPTS:-} -Xmx1G ${SERVICE_OPTS:-}\" && ");
+ if (hasDriverJar) {
+ cmd.append("cp ").append(EXT_JARS_PATH)
+ .append("/*.jar $HIVE_HOME/lib/ && ");
+ }
+ cmd.append("$HIVE_HOME/bin/schematool -dbType ")
+ .append(db.type())
+ .append(" -initOrUpgradeSchema");
+ if (passwordRef != null) {
+ cmd.append(" -passWord \"$DBPASSWORD\"");
+ }
+ String schemaCommand = cmd.toString();
+
+ List initContainers = new ArrayList<>();
+ List volumeMounts = new ArrayList<>();
+ List volumes = new ArrayList<>();
+ buildMetastoreVolumes(hiveCluster, volumeMounts, volumes);
+
+ // Schema init needs the JDBC driver JAR
+ List jars = new ArrayList<>();
+ if (db.driverJarUrl() != null) {
+ jars.add(db.driverJarUrl());
+ }
+ addExternalJars(spec.image(), jars,
+ initContainers, volumeMounts, volumes, envVars);
+
+ return new JobBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withBackoffLimit(3)
+ .withNewTemplate()
+ .withNewMetadata()
+ .withLabels(Labels.forComponent(
+ hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withRestartPolicy("OnFailure")
+ .withInitContainers(initContainers)
+ .addNewContainer()
+ .withName("schema-init")
+ .withImage(spec.image())
+ .withImagePullPolicy(spec.imagePullPolicy())
+ .withCommand("/bin/bash", "-c")
+ .withArgs(schemaCommand)
+ .withEnv(envVars)
+ .withVolumeMounts(volumeMounts)
+ .endContainer()
+ .withVolumes(volumes)
+ .endSpec()
+ .endTemplate()
+ .endSpec()
+ .build();
+ }
+
+ /** Returns the Job resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-schema-init";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/ScratchPvcDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/ScratchPvcDependent.java
new file mode 100644
index 000000000000..6a645f043574
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/ScratchPvcDependent.java
@@ -0,0 +1,90 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.List;
+
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaim;
+import io.fabric8.kubernetes.api.model.PersistentVolumeClaimBuilder;
+import io.fabric8.kubernetes.api.model.Quantity;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.spec.TezAmSpec;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/**
+ * Manages the shared scratch PersistentVolumeClaim mounted by both
+ * HiveServer2 and TezAM at /opt/hive/scratch.
+ *
+ * This mirrors the Docker Compose pattern where a named volume
+ * {@code scratch:/opt/hive/scratch} is shared between the hs2 and
+ * tezam containers so that the {@code dummy_path} written by HS2
+ * (for VALUES clause) is accessible by the TezAM.
+ *
+ * The PVC uses ReadWriteMany access mode so both pods can mount it
+ * simultaneously.
+ */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=scratch,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class ScratchPvcDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "scratch";
+
+ public ScratchPvcDependent() {
+ super(PersistentVolumeClaim.class);
+ }
+
+ @Override
+ protected PersistentVolumeClaim desired(HiveCluster hiveCluster,
+ Context context) {
+ TezAmSpec tezAm = hiveCluster.getSpec().tezAm();
+
+ PersistentVolumeClaimBuilder builder = new PersistentVolumeClaimBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withAccessModes(List.of("ReadWriteMany"))
+ .withNewResources()
+ .addToRequests("storage",
+ new Quantity(tezAm.scratchStorageSize()))
+ .endResources()
+ .endSpec();
+
+ if (tezAm.scratchStorageClassName() != null) {
+ builder.editSpec()
+ .withStorageClassName(tezAm.scratchStorageClassName())
+ .endSpec();
+ }
+
+ return builder.build();
+ }
+
+ /** Returns the PVC resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-scratch";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/TezAmServiceDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/TezAmServiceDependent.java
new file mode 100644
index 000000000000..781685286038
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/TezAmServiceDependent.java
@@ -0,0 +1,62 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import io.fabric8.kubernetes.api.model.Service;
+import io.fabric8.kubernetes.api.model.ServiceBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/**
+ * Manages the headless Kubernetes Service for Tez Application Master.
+ * Required by the StatefulSet for stable DNS entries so that
+ * HiveServer2 can resolve TezAM pod hostnames for RPC communication.
+ */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=tezam,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class TezAmServiceDependent
+ extends HiveDependentResource {
+
+ public TezAmServiceDependent() {
+ super(Service.class);
+ }
+
+ @Override
+ protected Service desired(HiveCluster hiveCluster,
+ Context context) {
+ return new ServiceBuilder()
+ .withNewMetadata()
+ .withName(hiveCluster.getMetadata().getName() + "-tezam")
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster,
+ TezAmStatefulSetDependent.COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withClusterIP("None")
+ .withSelector(Labels.selectorForComponent(hiveCluster,
+ TezAmStatefulSetDependent.COMPONENT))
+ .endSpec()
+ .build();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/TezAmStatefulSetDependent.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/TezAmStatefulSetDependent.java
new file mode 100644
index 000000000000..5cc7a3f800f3
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/TezAmStatefulSetDependent.java
@@ -0,0 +1,181 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import io.fabric8.kubernetes.api.model.Container;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.apps.StatefulSet;
+import io.fabric8.kubernetes.api.model.apps.StatefulSetBuilder;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.config.informer.Informer;
+import io.javaoperatorsdk.operator.processing.dependent.kubernetes.KubernetesDependent;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.model.spec.TezAmSpec;
+import org.apache.hive.kubernetes.operator.util.HadoopXmlBuilder;
+import org.apache.hive.kubernetes.operator.util.HiveConfigBuilder;
+import org.apache.hive.kubernetes.operator.util.Labels;
+
+/**
+ * Manages the Kubernetes StatefulSet for the Tez Application Master.
+ * Uses StatefulSet (with a headless Service) so that each TezAM pod
+ * gets a stable, DNS-resolvable hostname. HiveServer2 discovers
+ * TezAM pods via ZooKeeper and connects over RPC using the hostname,
+ * so the hostname must be resolvable within the cluster.
+ */
+@KubernetesDependent(
+ informer = @Informer(labelSelector = "app.kubernetes.io/component=tezam,"
+ + "app.kubernetes.io/managed-by=hive-kubernetes-operator")
+)
+public class TezAmStatefulSetDependent
+ extends HiveDependentResource {
+
+ public static final String COMPONENT = "tezam";
+ private static final String SCRATCH_MOUNT_PATH = "/opt/hive/scratch";
+
+ public TezAmStatefulSetDependent() {
+ super(StatefulSet.class);
+ }
+
+ @Override
+ protected StatefulSet desired(HiveCluster hiveCluster,
+ Context context) {
+ HiveClusterSpec spec = hiveCluster.getSpec();
+ TezAmSpec tezAm = spec.tezAm();
+ Map selectorLabels =
+ Labels.selectorForComponent(hiveCluster, COMPONENT);
+
+ List envVars = new ArrayList<>();
+ envVars.add(new EnvVar("SERVICE_NAME", "tezam", null));
+ envVars.add(new EnvVar("IS_RESUME", "true", null));
+ envVars.add(new EnvVar("HIVE_ZOOKEEPER_QUORUM",
+ spec.zookeeper().quorum(), null));
+ envVars.add(new EnvVar("TEZ_FRAMEWORK_MODE",
+ "STANDALONE_ZOOKEEPER", null));
+
+ if (spec.llap().isEnabled()) {
+ envVars.add(new EnvVar("HIVE_LLAP_DAEMON_SERVICE_HOSTS",
+ spec.llap().serviceHosts(), null));
+ }
+
+ // User-provided env vars (storage credentials, etc.)
+ if (spec.envVars() != null) {
+ envVars.addAll(spec.envVars());
+ }
+
+ String headlessServiceName =
+ hiveCluster.getMetadata().getName() + "-tezam";
+
+ List volumeMounts =
+ new ArrayList<>();
+ volumeMounts.add(new io.fabric8.kubernetes.api.model.VolumeMountBuilder()
+ .withName("hive-config")
+ .withMountPath(CONF_MOUNT_PATH).build());
+ volumeMounts.add(new io.fabric8.kubernetes.api.model.VolumeMountBuilder()
+ .withName("scratch")
+ .withMountPath(SCRATCH_MOUNT_PATH).build());
+
+ List volumes =
+ new ArrayList<>();
+ volumes.add(buildProjectedConfigVolume("hive-config",
+ HiveServer2ConfigMapDependent.resourceName(hiveCluster),
+ HadoopConfigMapDependent.resourceName(hiveCluster)));
+ volumes.add(new io.fabric8.kubernetes.api.model.VolumeBuilder()
+ .withName("scratch")
+ .withNewPersistentVolumeClaim()
+ .withClaimName(ScratchPvcDependent.resourceName(hiveCluster))
+ .endPersistentVolumeClaim()
+ .build());
+
+ List initContainers = new ArrayList<>();
+ addExternalJars(spec.image(), spec.externalJars(),
+ initContainers, volumeMounts, volumes, envVars);
+ replaceConfMountWithSubPaths(volumeMounts, "hive-config",
+ "hive-site.xml", "tez-site.xml", "core-site.xml");
+
+ // Pre-compute config hash for the pod template annotation.
+ // TezAM uses the same ConfigMaps as HS2 (hive-site.xml + tez-site.xml + core-site.xml).
+ String configHash = sha256(
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getHiveServer2HiveSite(hiveCluster, spec)),
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getTezSite(spec)),
+ HadoopXmlBuilder.buildXml(HiveConfigBuilder.getHadoopCoreSite(spec)));
+
+ StatefulSet statefulSet = new StatefulSetBuilder()
+ .withNewMetadata()
+ .withName(resourceName(hiveCluster))
+ .withNamespace(hiveCluster.getMetadata().getNamespace())
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .endMetadata()
+ .withNewSpec()
+ .withReplicas(tezAm.replicas())
+ .withServiceName(headlessServiceName)
+ .withNewSelector()
+ .withMatchLabels(selectorLabels)
+ .endSelector()
+ .withNewTemplate()
+ .withNewMetadata()
+ .withLabels(Labels.forComponent(hiveCluster, COMPONENT))
+ .addToAnnotations("kubectl.kubernetes.io/default-container", "tezam")
+ .addToAnnotations("hive.apache.org/config-hash", configHash)
+ .endMetadata()
+ .withNewSpec()
+ .withInitContainers(initContainers)
+ .addNewContainer()
+ .withName("tezam")
+ .withImage(spec.image())
+ .withImagePullPolicy(spec.imagePullPolicy())
+ .withEnv(envVars)
+ .withResources(buildResources(tezAm.resources()))
+ .withVolumeMounts(volumeMounts)
+ .endContainer()
+ .withVolumes(volumes)
+ .endSpec()
+ .endTemplate()
+ .endSpec()
+ .build();
+
+ applySpreadAffinityIfAbsent(
+ statefulSet.getSpec().getTemplate().getSpec(), selectorLabels);
+
+ if (spec.volumes() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getVolumes().addAll(spec.volumes());
+ }
+ if (spec.volumeMounts() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(spec.volumeMounts());
+ }
+ if (tezAm.extraVolumes() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getVolumes().addAll(tezAm.extraVolumes());
+ }
+ if (tezAm.extraVolumeMounts() != null) {
+ statefulSet.getSpec().getTemplate().getSpec().getContainers().get(0).getVolumeMounts()
+ .addAll(tezAm.extraVolumeMounts());
+ }
+ return statefulSet;
+ }
+
+ /** Returns the StatefulSet resource name for this HiveCluster. */
+ public static String resourceName(HiveCluster hiveCluster) {
+ return hiveCluster.getMetadata().getName() + "-tezam";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/HiveServer2Precondition.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/HiveServer2Precondition.java
new file mode 100644
index 000000000000..a36002dbf886
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/HiveServer2Precondition.java
@@ -0,0 +1,53 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent.condition;
+
+import io.fabric8.kubernetes.api.model.apps.Deployment;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.DependentResource;
+import io.javaoperatorsdk.operator.processing.dependent.workflow.Condition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/**
+ * Precondition for HiveServer2 Deployment.
+ * If Metastore is external, proceed immediately.
+ * If managed, wait for Metastore pods to be ready.
+ */
+public class HiveServer2Precondition implements Condition {
+
+ @Override
+ public boolean isMet(
+ DependentResource dependentResource,
+ HiveCluster primary,
+ Context context) {
+
+ if (!primary.getSpec().metastore().isEnabled()) {
+ return true;
+ }
+
+ int desiredReplicas = primary.getSpec().metastore().replicas();
+ return context.getSecondaryResources(Deployment.class).stream()
+ .filter(d -> d.getMetadata().getName().equals(primary.getMetadata().getName() + "-metastore"))
+ .findFirst()
+ .map(deployment -> deployment.getStatus() != null
+ && deployment.getStatus().getReadyReplicas() != null
+ && deployment.getStatus().getReadyReplicas() >= desiredReplicas)
+ .orElse(false);
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/LlapEnabledCondition.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/LlapEnabledCondition.java
new file mode 100644
index 000000000000..a113c50efbff
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/LlapEnabledCondition.java
@@ -0,0 +1,41 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent.condition;
+
+import io.fabric8.kubernetes.api.model.HasMetadata;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.DependentResource;
+import io.javaoperatorsdk.operator.processing.dependent.workflow.Condition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/**
+ * Activation condition for LLAP dependent resources.
+ * Returns true only when spec.llap.enabled is true.
+ */
+public class LlapEnabledCondition
+ implements Condition {
+
+ @Override
+ public boolean isMet(
+ DependentResource dependentResource,
+ HiveCluster primary,
+ Context context) {
+ return primary.getSpec().llap().isEnabled();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/MetastoreEnabledCondition.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/MetastoreEnabledCondition.java
new file mode 100644
index 000000000000..b1cb4139ac96
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/MetastoreEnabledCondition.java
@@ -0,0 +1,39 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent.condition;
+
+import io.fabric8.kubernetes.api.model.HasMetadata;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.DependentResource;
+import io.javaoperatorsdk.operator.processing.dependent.workflow.Condition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/**
+ * Activation condition for Metastore dependent resources.
+ * Returns true only when spec.metastore.enabled is true.
+ */
+public class MetastoreEnabledCondition implements Condition {
+ @Override
+ public boolean isMet(
+ DependentResource dependentResource,
+ HiveCluster primary,
+ Context context) {
+ return primary.getSpec().metastore().isEnabled();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/MetastoreReadyCondition.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/MetastoreReadyCondition.java
new file mode 100644
index 000000000000..7b3169f32043
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/MetastoreReadyCondition.java
@@ -0,0 +1,49 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent.condition;
+
+import io.fabric8.kubernetes.api.model.apps.Deployment;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.DependentResource;
+import io.javaoperatorsdk.operator.processing.dependent.workflow.Condition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/**
+ * Ready condition that checks whether the Metastore Deployment has the
+ * desired number of ready replicas. Used to gate HiveServer2 Deployment.
+ */
+public class MetastoreReadyCondition
+ implements Condition {
+
+ @Override
+ public boolean isMet(
+ DependentResource dependentResource,
+ HiveCluster primary,
+ Context context) {
+ if (!primary.getSpec().metastore().isEnabled()) {
+ return true;
+ }
+ int desiredReplicas = primary.getSpec().metastore().replicas();
+ return dependentResource.getSecondaryResource(primary, context)
+ .map(deployment -> deployment.getStatus() != null
+ && deployment.getStatus().getReadyReplicas() != null
+ && deployment.getStatus().getReadyReplicas() >= desiredReplicas)
+ .orElse(false);
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/SchemaJobCompletedCondition.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/SchemaJobCompletedCondition.java
new file mode 100644
index 000000000000..1b0b44318596
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/SchemaJobCompletedCondition.java
@@ -0,0 +1,48 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent.condition;
+
+import io.fabric8.kubernetes.api.model.batch.v1.Job;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.DependentResource;
+import io.javaoperatorsdk.operator.processing.dependent.workflow.Condition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/**
+ * Ready condition that checks whether the schema initialization Job
+ * has completed successfully. Used to gate Metastore Deployment creation.
+ */
+public class SchemaJobCompletedCondition
+ implements Condition {
+
+ @Override
+ public boolean isMet(
+ DependentResource dependentResource,
+ HiveCluster primary,
+ Context context) {
+ if (!primary.getSpec().metastore().isEnabled()) {
+ return true;
+ }
+ return dependentResource.getSecondaryResource(primary, context)
+ .map(job -> job.getStatus() != null
+ && job.getStatus().getSucceeded() != null
+ && job.getStatus().getSucceeded() >= 1)
+ .orElse(false);
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/TezAmEnabledCondition.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/TezAmEnabledCondition.java
new file mode 100644
index 000000000000..85ae7e45dbdb
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/dependent/condition/TezAmEnabledCondition.java
@@ -0,0 +1,41 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.dependent.condition;
+
+import io.fabric8.kubernetes.api.model.HasMetadata;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.DependentResource;
+import io.javaoperatorsdk.operator.processing.dependent.workflow.Condition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/**
+ * Activation condition for Tez AM dependent resources.
+ * Returns true only when spec.tezAm.enabled is true.
+ */
+public class TezAmEnabledCondition
+ implements Condition {
+
+ @Override
+ public boolean isMet(
+ DependentResource dependentResource,
+ HiveCluster primary,
+ Context context) {
+ return primary.getSpec().tezAm().isEnabled();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveCluster.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveCluster.java
new file mode 100644
index 000000000000..6a708e7c8c91
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveCluster.java
@@ -0,0 +1,39 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model;
+
+import io.fabric8.kubernetes.api.model.Namespaced;
+import io.fabric8.kubernetes.client.CustomResource;
+import io.fabric8.kubernetes.model.annotation.Group;
+import io.fabric8.kubernetes.model.annotation.Kind;
+import io.fabric8.kubernetes.model.annotation.ShortNames;
+import io.fabric8.kubernetes.model.annotation.Version;
+
+/**
+ * HiveCluster is the root CRD type representing a complete Apache Hive deployment
+ * on Kubernetes. It manages Metastore, HiveServer2, LLAP daemons, and Tez AM.
+ */
+@Group("hive.apache.org")
+@Version("v1alpha1")
+@Kind("HiveCluster")
+@ShortNames("hc")
+public class HiveCluster
+ extends CustomResource
+ implements Namespaced {
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveClusterSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveClusterSpec.java
new file mode 100644
index 000000000000..40dd8a771203
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveClusterSpec.java
@@ -0,0 +1,86 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model;
+
+import java.util.List;
+import java.util.Objects;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.crd.generator.annotation.PreserveUnknownFields;
+import io.fabric8.crd.generator.annotation.SchemaFrom;
+import io.fabric8.generator.annotation.Required;
+import io.fabric8.kubernetes.api.model.EnvVar;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+import org.apache.hive.kubernetes.operator.model.spec.HadoopSpec;
+import org.apache.hive.kubernetes.operator.model.spec.HiveServer2Spec;
+import org.apache.hive.kubernetes.operator.model.spec.LlapSpec;
+import org.apache.hive.kubernetes.operator.model.spec.MetastoreSpec;
+import org.apache.hive.kubernetes.operator.model.spec.TezAmSpec;
+import org.apache.hive.kubernetes.operator.model.spec.ZookeeperSpec;
+
+/** Full specification for a HiveCluster custom resource. */
+public record HiveClusterSpec(
+ @JsonPropertyDescription("Docker image to use for all Hive components")
+ String image,
+ @JsonPropertyDescription("Image pull policy: Always, Never, or IfNotPresent")
+ String imagePullPolicy,
+ @JsonPropertyDescription("Metastore component configuration")
+ MetastoreSpec metastore,
+ @JsonPropertyDescription("HiveServer2 component configuration")
+ HiveServer2Spec hiveServer2,
+ @JsonPropertyDescription("LLAP daemon configuration. Enabled by default.")
+ LlapSpec llap,
+ @JsonPropertyDescription("Tez Application Master configuration. Enabled by default.")
+ TezAmSpec tezAm,
+ @Required
+ @JsonPropertyDescription(
+ "External ZooKeeper connection details (not managed by this operator)")
+ ZookeeperSpec zookeeper,
+ @JsonPropertyDescription("Hadoop/core-site.xml configuration overrides")
+ HadoopSpec hadoop,
+ @JsonPropertyDescription(
+ "Environment variables injected into all component pods "
+ + "(e.g., storage credentials, custom JVM options)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List envVars,
+ @JsonPropertyDescription(
+ "External JARs (URLs) downloaded into all component pods and added to "
+ + "HADOOP_CLASSPATH (e.g., GCS connector, ABFS connector)")
+ List externalJars,
+ @JsonPropertyDescription(
+ "Volumes added to all component pods "
+ + "(e.g., Secrets containing keytabs or service account keys)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List volumes,
+ @JsonPropertyDescription(
+ "Volume mounts added to all component containers "
+ + "(e.g., mounting a GCS key file at /etc/gcs/key.json)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List volumeMounts) {
+
+ public HiveClusterSpec {
+ Objects.requireNonNull(zookeeper,
+ "zookeeper must be provided in the HiveCluster spec");
+ envVars = envVars != null ? envVars : List.of();
+ externalJars = externalJars != null ? externalJars : List.of();
+ volumes = volumes != null ? volumes : List.of();
+ volumeMounts = volumeMounts != null ? volumeMounts : List.of();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveClusterStatus.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveClusterStatus.java
new file mode 100644
index 000000000000..d2432dda2246
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/HiveClusterStatus.java
@@ -0,0 +1,106 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import io.fabric8.kubernetes.api.model.Condition;
+import org.apache.hive.kubernetes.operator.model.status.ComponentStatus;
+
+/** Status subresource for the HiveCluster custom resource. */
+public class HiveClusterStatus {
+
+ private List conditions = new ArrayList<>();
+ private ComponentStatus metastore;
+ private ComponentStatus hiveServer2;
+ private ComponentStatus llap;
+ private ComponentStatus tezAm;
+ private Long observedGeneration;
+
+ public List getConditions() {
+ return conditions;
+ }
+
+ public void setConditions(List conditions) {
+ this.conditions = conditions;
+ }
+
+ public ComponentStatus getMetastore() {
+ return metastore;
+ }
+
+ public void setMetastore(ComponentStatus metastore) {
+ this.metastore = metastore;
+ }
+
+ public ComponentStatus getHiveServer2() {
+ return hiveServer2;
+ }
+
+ public void setHiveServer2(ComponentStatus hiveServer2) {
+ this.hiveServer2 = hiveServer2;
+ }
+
+ public ComponentStatus getLlap() {
+ return llap;
+ }
+
+ public void setLlap(ComponentStatus llap) {
+ this.llap = llap;
+ }
+
+ public ComponentStatus getTezAm() {
+ return tezAm;
+ }
+
+ public void setTezAm(ComponentStatus tezAm) {
+ this.tezAm = tezAm;
+ }
+
+ public Long getObservedGeneration() {
+ return observedGeneration;
+ }
+
+ public void setObservedGeneration(Long observedGeneration) {
+ this.observedGeneration = observedGeneration;
+ }
+
+ @Override
+ public boolean equals(Object o) {
+ if (this == o) {
+ return true;
+ }
+ if (o == null || getClass() != o.getClass()) {
+ return false;
+ }
+ HiveClusterStatus that = (HiveClusterStatus) o;
+ return java.util.Objects.equals(observedGeneration, that.observedGeneration) &&
+ java.util.Objects.equals(conditions, that.conditions) &&
+ java.util.Objects.equals(metastore, that.metastore) &&
+ java.util.Objects.equals(hiveServer2, that.hiveServer2) &&
+ java.util.Objects.equals(llap, that.llap) &&
+ java.util.Objects.equals(tezAm, that.tezAm);
+ }
+
+ @Override
+ public int hashCode() {
+ return java.util.Objects.hash(conditions, metastore, hiveServer2, llap, tezAm, observedGeneration);
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/DatabaseConfig.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/DatabaseConfig.java
new file mode 100644
index 000000000000..a93b4684bd02
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/DatabaseConfig.java
@@ -0,0 +1,46 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.generator.annotation.Default;
+
+/** JDBC database connection configuration for the Hive Metastore backend. */
+public record DatabaseConfig(
+ @JsonPropertyDescription("Database type: derby, mysql, postgres, mssql, or oracle")
+ @Default("derby")
+ String type,
+ @JsonPropertyDescription("JDBC connection URL")
+ String url,
+ @JsonPropertyDescription("JDBC driver class name")
+ String driver,
+ @JsonPropertyDescription("Database username")
+ String username,
+ @JsonPropertyDescription("Reference to a Kubernetes Secret containing the database password")
+ SecretKeyRef passwordSecretRef,
+ @JsonPropertyDescription(
+ "URL to download the JDBC driver jar, e.g. "
+ + "https://repo1.maven.org/maven2/org/postgresql/"
+ + "postgresql/42.7.5/postgresql-42.7.5.jar")
+ String driverJarUrl) {
+
+ public DatabaseConfig {
+ type = type != null ? type : "derby";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/HadoopSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/HadoopSpec.java
new file mode 100644
index 000000000000..420dc66d4c54
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/HadoopSpec.java
@@ -0,0 +1,29 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import java.util.Map;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+
+/** Hadoop configuration overrides, primarily for core-site.xml (filesystem settings). */
+public record HadoopSpec(
+ @JsonPropertyDescription("Key-value pairs written into core-site.xml")
+ Map coreSiteOverrides) {
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/HiveServer2Spec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/HiveServer2Spec.java
new file mode 100644
index 000000000000..578b7e91f67d
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/HiveServer2Spec.java
@@ -0,0 +1,71 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import java.util.List;
+import java.util.Map;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.crd.generator.annotation.PreserveUnknownFields;
+import io.fabric8.crd.generator.annotation.SchemaFrom;
+import io.fabric8.generator.annotation.Default;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+
+/** Configuration for the HiveServer2 component. */
+public record HiveServer2Spec(
+ @JsonPropertyDescription("Number of replicas")
+ @Default("1")
+ Integer replicas,
+ @JsonPropertyDescription("Resource requirements for pods")
+ ResourceRequirementsSpec resources,
+ @JsonPropertyDescription("Additional configuration overrides as key-value pairs")
+ Map configOverrides,
+ @JsonPropertyDescription("Additional volumes to attach to the pod (e.g., for keytabs or truststores)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumes,
+ @JsonPropertyDescription("Additional volume mounts for the container")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumeMounts,
+ @JsonPropertyDescription("Kubernetes Service type: ClusterIP, LoadBalancer, or NodePort")
+ @Default("ClusterIP")
+ String serviceType,
+ @JsonPropertyDescription("HiveServer2 Thrift port")
+ @Default("10000")
+ Integer thriftPort,
+ @JsonPropertyDescription("HiveServer2 Web UI port")
+ @Default("10002")
+ Integer webUiPort,
+ @JsonPropertyDescription("List of URIs to external JARs to download and add to HS2 classpath ")
+ List externalJars,
+ @JsonPropertyDescription("Readiness probe configuration")
+ ProbeSpec readinessProbe,
+ @JsonPropertyDescription("Liveness probe configuration")
+ ProbeSpec livenessProbe) {
+
+ public HiveServer2Spec {
+ replicas = replicas != null ? replicas : 1;
+ serviceType = serviceType != null ? serviceType : "ClusterIP";
+ thriftPort = thriftPort != null ? thriftPort : 10000;
+ webUiPort = webUiPort != null ? webUiPort : 10002;
+ extraVolumes = extraVolumes != null ? extraVolumes : List.of();
+ extraVolumeMounts = extraVolumeMounts != null ? extraVolumeMounts : List.of();
+ externalJars = externalJars != null ? externalJars : List.of();
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/LlapSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/LlapSpec.java
new file mode 100644
index 000000000000..17ff5967ff9a
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/LlapSpec.java
@@ -0,0 +1,73 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import java.util.List;
+import java.util.Map;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.crd.generator.annotation.PreserveUnknownFields;
+import io.fabric8.crd.generator.annotation.SchemaFrom;
+import io.fabric8.generator.annotation.Default;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+
+/** Configuration for LLAP (Live Long and Process) daemons. */
+public record LlapSpec(
+ @JsonPropertyDescription("Number of replicas")
+ @Default("1")
+ Integer replicas,
+ @JsonPropertyDescription("Resource requirements for pods")
+ ResourceRequirementsSpec resources,
+ @JsonPropertyDescription("Additional configuration overrides as key-value pairs")
+ Map configOverrides,
+ @JsonPropertyDescription("Additional volumes to attach to the pod (e.g., for keytabs or truststores)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumes,
+ @JsonPropertyDescription("Additional volume mounts for the container")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumeMounts,
+ @JsonPropertyDescription("Whether LLAP is enabled")
+ @Default("true")
+ Boolean enabled,
+ @JsonPropertyDescription("Number of LLAP executors per daemon")
+ @Default("1")
+ Integer executors,
+ @JsonPropertyDescription("Memory in MB per LLAP daemon instance")
+ @Default("1024")
+ Integer memoryMb,
+ @JsonPropertyDescription("LLAP service hosts identifier for ZooKeeper registration")
+ String serviceHosts,
+ @JsonPropertyDescription("Readiness probe configuration")
+ ProbeSpec readinessProbe) {
+
+ public LlapSpec {
+ replicas = replicas != null ? replicas : 1;
+ enabled = enabled != null ? enabled : true;
+ executors = executors != null ? executors : 1;
+ memoryMb = memoryMb != null ? memoryMb : 1024;
+ serviceHosts = serviceHosts != null ? serviceHosts : "@llap0";
+ extraVolumes = extraVolumes != null ? extraVolumes : List.of();
+ extraVolumeMounts = extraVolumeMounts != null ? extraVolumeMounts : List.of();
+ }
+
+ public boolean isEnabled() {
+ return enabled;
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/MetastoreSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/MetastoreSpec.java
new file mode 100644
index 000000000000..307c17221ee7
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/MetastoreSpec.java
@@ -0,0 +1,74 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import java.util.List;
+import java.util.Map;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.crd.generator.annotation.PreserveUnknownFields;
+import io.fabric8.crd.generator.annotation.SchemaFrom;
+import io.fabric8.generator.annotation.Default;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+
+/** Configuration for the Hive Metastore component. */
+public record MetastoreSpec(
+ @JsonPropertyDescription("Number of replicas")
+ @Default("1")
+ Integer replicas,
+ @JsonPropertyDescription("Resource requirements for pods")
+ ResourceRequirementsSpec resources,
+ @JsonPropertyDescription("Additional configuration overrides as key-value pairs")
+ Map configOverrides,
+ @JsonPropertyDescription("Additional volumes to attach to the pod (e.g., for keytabs or truststores)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumes,
+ @JsonPropertyDescription("Additional volume mounts for the container")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumeMounts,
+ @JsonPropertyDescription("Database connection configuration for the metastore backend")
+ DatabaseConfig database,
+ @JsonPropertyDescription("Warehouse directory path")
+ @Default("/hive/warehouse")
+ String warehouseDir,
+ @JsonPropertyDescription("Whether the operator should deploy and manage a Metastore")
+ @Default("true")
+ Boolean enabled,
+ @JsonPropertyDescription("Thrift URI of the external Metastore (if enabled is false)")
+ String externalUri,
+ @JsonPropertyDescription("Readiness probe configuration")
+ ProbeSpec readinessProbe,
+ @JsonPropertyDescription("Liveness probe configuration")
+ ProbeSpec livenessProbe) {
+
+ public MetastoreSpec {
+ replicas = replicas != null ? replicas : 1;
+ database = database != null ? database : new DatabaseConfig(
+ "derby", null, null, null, null, null);
+ warehouseDir = warehouseDir != null ? warehouseDir : "/hive/warehouse";
+ enabled = enabled != null ? enabled : true;
+ extraVolumes = extraVolumes != null ? extraVolumes : List.of();
+ extraVolumeMounts = extraVolumeMounts != null ? extraVolumeMounts : List.of();
+ }
+
+ public boolean isEnabled() {
+ return enabled;
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ProbeSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ProbeSpec.java
new file mode 100644
index 000000000000..7afab6a0277b
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ProbeSpec.java
@@ -0,0 +1,35 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+
+/** Kubernetes probe (liveness/readiness) timing configurations. */
+public record ProbeSpec(
+ @JsonPropertyDescription("Number of seconds after the container has started before probes are initiated.")
+ Integer initialDelaySeconds,
+ @JsonPropertyDescription("How often (in seconds) to perform the probe.")
+ Integer periodSeconds,
+ @JsonPropertyDescription("Number of seconds after which the probe times out.")
+ Integer timeoutSeconds,
+ @JsonPropertyDescription("Minimum consecutive failures for the probe to be considered failed after having succeeded.")
+ Integer failureThreshold,
+ @JsonPropertyDescription("Minimum consecutive successes for the probe to be considered successful after having failed.")
+ Integer successThreshold) {
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ResourceRequirementsSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ResourceRequirementsSpec.java
new file mode 100644
index 000000000000..b7b10934bc77
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ResourceRequirementsSpec.java
@@ -0,0 +1,41 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.generator.annotation.Default;
+
+/** Kubernetes resource requirements specification for CPU and memory. */
+public record ResourceRequirementsSpec(
+ @JsonPropertyDescription("CPU request (e.g. 500m, 1)")
+ @Default("500m")
+ String requestsCpu,
+ @JsonPropertyDescription("Memory request (e.g. 1Gi, 512Mi)")
+ @Default("1Gi")
+ String requestsMemory,
+ @JsonPropertyDescription("CPU limit (e.g. 2, 1000m)")
+ String limitsCpu,
+ @JsonPropertyDescription("Memory limit (e.g. 2Gi, 1024Mi)")
+ String limitsMemory) {
+
+ public ResourceRequirementsSpec {
+ requestsCpu = requestsCpu != null ? requestsCpu : "500m";
+ requestsMemory = requestsMemory != null ? requestsMemory : "1Gi";
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/SecretKeyRef.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/SecretKeyRef.java
new file mode 100644
index 000000000000..3084552bd1e1
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/SecretKeyRef.java
@@ -0,0 +1,29 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+
+/** Reference to a key within a Kubernetes Secret. */
+public record SecretKeyRef(
+ @JsonPropertyDescription("Name of the Kubernetes Secret")
+ String name,
+ @JsonPropertyDescription("Key within the Secret")
+ String key) {
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/TezAmSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/TezAmSpec.java
new file mode 100644
index 000000000000..a0494c2c5e73
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/TezAmSpec.java
@@ -0,0 +1,68 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import java.util.List;
+import java.util.Map;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.crd.generator.annotation.PreserveUnknownFields;
+import io.fabric8.crd.generator.annotation.SchemaFrom;
+import io.fabric8.generator.annotation.Default;
+import io.fabric8.kubernetes.api.model.Volume;
+import io.fabric8.kubernetes.api.model.VolumeMount;
+
+/** Configuration for the Tez Application Master component. */
+public record TezAmSpec(
+ @JsonPropertyDescription("Number of replicas")
+ @Default("1")
+ Integer replicas,
+ @JsonPropertyDescription("Resource requirements for pods")
+ ResourceRequirementsSpec resources,
+ @JsonPropertyDescription("Additional configuration overrides as key-value pairs")
+ Map configOverrides,
+ @JsonPropertyDescription("Additional volumes to attach to the pod (e.g., for keytabs or truststores)")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumes,
+ @JsonPropertyDescription("Additional volume mounts for the container")
+ @SchemaFrom(type = Object[].class) @PreserveUnknownFields
+ List extraVolumeMounts,
+ @JsonPropertyDescription("Whether Tez AM is enabled")
+ @Default("true")
+ Boolean enabled,
+ @JsonPropertyDescription("Storage size for the shared scratch PVC "
+ + "(ReadWriteMany) mounted on HS2 and TezAM at /opt/hive/scratch")
+ @Default("1Gi")
+ String scratchStorageSize,
+ @JsonPropertyDescription("StorageClass for the shared scratch PVC. "
+ + "Must support ReadWriteMany access. If null, uses cluster default.")
+ String scratchStorageClassName) {
+
+ public TezAmSpec {
+ replicas = replicas != null ? replicas : 1;
+ enabled = enabled != null ? enabled : true;
+ scratchStorageSize = scratchStorageSize != null ? scratchStorageSize : "1Gi";
+ extraVolumes = extraVolumes != null ? extraVolumes : List.of();
+ extraVolumeMounts = extraVolumeMounts != null ? extraVolumeMounts : List.of();
+ }
+
+ public boolean isEnabled() {
+ return enabled;
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ZookeeperSpec.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ZookeeperSpec.java
new file mode 100644
index 000000000000..a33908ae38df
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/spec/ZookeeperSpec.java
@@ -0,0 +1,36 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.spec;
+
+import java.util.Objects;
+
+import com.fasterxml.jackson.annotation.JsonPropertyDescription;
+import io.fabric8.generator.annotation.Required;
+
+/** External ZooKeeper connection configuration. ZooKeeper is not managed by this operator. */
+public record ZookeeperSpec(
+ @Required
+ @JsonPropertyDescription("ZooKeeper quorum connection string. This field is strictly required.")
+ String quorum) {
+
+ public ZookeeperSpec {
+ Objects.requireNonNull(quorum,
+ "ZooKeeper quorum must be explicitly defined in the HiveCluster spec.");
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/status/ComponentStatus.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/status/ComponentStatus.java
new file mode 100644
index 000000000000..155c46f3a714
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/model/status/ComponentStatus.java
@@ -0,0 +1,71 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.model.status;
+
+/**
+ * Status of an individual Hive component (Metastore, HS2, LLAP, TezAM).
+ */
+public class ComponentStatus {
+
+ private int readyReplicas;
+ private int desiredReplicas;
+ private String phase;
+
+ public int getReadyReplicas() {
+ return readyReplicas;
+ }
+
+ public void setReadyReplicas(int readyReplicas) {
+ this.readyReplicas = readyReplicas;
+ }
+
+ public int getDesiredReplicas() {
+ return desiredReplicas;
+ }
+
+ public void setDesiredReplicas(int desiredReplicas) {
+ this.desiredReplicas = desiredReplicas;
+ }
+
+ public String getPhase() {
+ return phase;
+ }
+
+ public void setPhase(String phase) {
+ this.phase = phase;
+ }
+
+ @Override
+ public boolean equals(Object o) {
+ if (this == o) {
+ return true;
+ }
+ if (o == null || getClass() != o.getClass()) {
+ return false;
+ }
+ ComponentStatus that = (ComponentStatus) o;
+ return readyReplicas == that.readyReplicas && desiredReplicas == that.desiredReplicas && java.util.Objects.equals(
+ phase, that.phase);
+ }
+
+ @Override
+ public int hashCode() {
+ return java.util.Objects.hash(readyReplicas, desiredReplicas, phase);
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/reconciler/HiveClusterReconciler.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/reconciler/HiveClusterReconciler.java
new file mode 100644
index 000000000000..c9823640a5e7
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/reconciler/HiveClusterReconciler.java
@@ -0,0 +1,335 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.reconciler;
+
+import java.time.Instant;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Objects;
+import java.util.function.Function;
+
+import io.fabric8.kubernetes.api.model.Condition;
+import io.fabric8.kubernetes.api.model.HasMetadata;
+import io.fabric8.kubernetes.api.model.apps.Deployment;
+import io.fabric8.kubernetes.api.model.apps.StatefulSet;
+import io.fabric8.kubernetes.api.model.batch.v1.Job;
+import io.javaoperatorsdk.operator.api.reconciler.Context;
+import io.javaoperatorsdk.operator.api.reconciler.ControllerConfiguration;
+import io.javaoperatorsdk.operator.api.reconciler.ErrorStatusUpdateControl;
+import io.javaoperatorsdk.operator.api.reconciler.Reconciler;
+import io.javaoperatorsdk.operator.api.reconciler.UpdateControl;
+import io.javaoperatorsdk.operator.api.reconciler.Workflow;
+import io.javaoperatorsdk.operator.api.reconciler.dependent.Dependent;
+import org.apache.hive.kubernetes.operator.dependent.HadoopConfigMapDependent;
+import org.apache.hive.kubernetes.operator.dependent.HiveServer2ConfigMapDependent;
+import org.apache.hive.kubernetes.operator.dependent.HiveServer2DeploymentDependent;
+import org.apache.hive.kubernetes.operator.dependent.HiveServer2ServiceDependent;
+import org.apache.hive.kubernetes.operator.dependent.LlapConfigMapDependent;
+import org.apache.hive.kubernetes.operator.dependent.LlapServiceDependent;
+import org.apache.hive.kubernetes.operator.dependent.LlapStatefulSetDependent;
+import org.apache.hive.kubernetes.operator.dependent.MetastoreConfigMapDependent;
+import org.apache.hive.kubernetes.operator.dependent.MetastoreDeploymentDependent;
+import org.apache.hive.kubernetes.operator.dependent.MetastoreServiceDependent;
+import org.apache.hive.kubernetes.operator.dependent.SchemaInitJobDependent;
+import org.apache.hive.kubernetes.operator.dependent.ScratchPvcDependent;
+import org.apache.hive.kubernetes.operator.dependent.TezAmServiceDependent;
+import org.apache.hive.kubernetes.operator.dependent.TezAmStatefulSetDependent;
+import org.apache.hive.kubernetes.operator.dependent.condition.HiveServer2Precondition;
+import org.apache.hive.kubernetes.operator.dependent.condition.LlapEnabledCondition;
+import org.apache.hive.kubernetes.operator.dependent.condition.MetastoreEnabledCondition;
+import org.apache.hive.kubernetes.operator.dependent.condition.MetastoreReadyCondition;
+import org.apache.hive.kubernetes.operator.dependent.condition.SchemaJobCompletedCondition;
+import org.apache.hive.kubernetes.operator.dependent.condition.TezAmEnabledCondition;
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterStatus;
+import org.apache.hive.kubernetes.operator.model.status.ComponentStatus;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+/**
+ * Main reconciler for the HiveCluster custom resource.
+ * Orchestrates all dependent resources with proper dependency ordering.
+ */
+@ControllerConfiguration
+@Workflow(dependents = {
+ // --- ConfigMap dependents ---
+ @Dependent(
+ name = "hadoop-configmap",
+ type = HadoopConfigMapDependent.class
+ ),
+ @Dependent(
+ name = "metastore-configmap",
+ type = MetastoreConfigMapDependent.class,
+ activationCondition = MetastoreEnabledCondition.class
+ ),
+ @Dependent(
+ name = "hiveserver2-configmap",
+ type = HiveServer2ConfigMapDependent.class
+ ),
+ // --- Job dependents ---
+ @Dependent(
+ name = "schema-init-job",
+ type = SchemaInitJobDependent.class,
+ dependsOn = {"metastore-configmap", "hadoop-configmap"},
+ readyPostcondition = SchemaJobCompletedCondition.class,
+ activationCondition = MetastoreEnabledCondition.class
+ ),
+ // --- Deployment dependents ---
+ @Dependent(
+ name = "metastore-deployment",
+ type = MetastoreDeploymentDependent.class,
+ dependsOn = {"schema-init-job"},
+ readyPostcondition = MetastoreReadyCondition.class,
+ activationCondition = MetastoreEnabledCondition.class
+ ),
+ // --- Service dependents ---
+ @Dependent(
+ name = "metastore-service",
+ type = MetastoreServiceDependent.class,
+ dependsOn = {"metastore-configmap"},
+ activationCondition = MetastoreEnabledCondition.class
+ ),
+ @Dependent(
+ name = "hiveserver2-deployment",
+ type = HiveServer2DeploymentDependent.class,
+ dependsOn = {"hiveserver2-configmap",
+ "hadoop-configmap"},
+ reconcilePrecondition = HiveServer2Precondition.class
+ ),
+ @Dependent(
+ name = "hiveserver2-service",
+ type = HiveServer2ServiceDependent.class,
+ dependsOn = {"hiveserver2-configmap"}
+ ),
+ // --- LLAP (conditional) ---
+ @Dependent(
+ name = "llap-configmap",
+ type = LlapConfigMapDependent.class,
+ activationCondition = LlapEnabledCondition.class
+ ),
+ @Dependent(
+ name = "llap-statefulset",
+ type = LlapStatefulSetDependent.class,
+ dependsOn = {"llap-configmap", "hadoop-configmap"},
+ activationCondition = LlapEnabledCondition.class
+ ),
+ @Dependent(
+ name = "llap-service",
+ type = LlapServiceDependent.class,
+ activationCondition = LlapEnabledCondition.class
+ ),
+ // --- TezAM (conditional) ---
+ @Dependent(
+ name = "scratch-pvc",
+ type = ScratchPvcDependent.class,
+ activationCondition = TezAmEnabledCondition.class
+ ),
+ @Dependent(
+ name = "tezam-service",
+ type = TezAmServiceDependent.class,
+ activationCondition = TezAmEnabledCondition.class
+ ),
+ @Dependent(
+ name = "tezam-statefulset",
+ type = TezAmStatefulSetDependent.class,
+ dependsOn = {"hiveserver2-configmap", "hadoop-configmap",
+ "tezam-service", "scratch-pvc"},
+ activationCondition = TezAmEnabledCondition.class
+ )
+})
+public class HiveClusterReconciler
+ implements Reconciler {
+
+ private static final Logger LOG =
+ LoggerFactory.getLogger(HiveClusterReconciler.class);
+
+ @Override
+ public UpdateControl reconcile(HiveCluster resource,
+ Context context) {
+ LOG.debug("Reconciling HiveCluster: {}/{}",
+ resource.getMetadata().getNamespace(),
+ resource.getMetadata().getName());
+
+ HiveClusterStatus existingStatus = resource.getStatus();
+ HiveClusterStatus newStatus = buildStatus(resource, context, existingStatus);
+
+ if (Objects.equals(existingStatus, newStatus)) {
+ return UpdateControl.noUpdate();
+ }
+
+ resource.setStatus(newStatus);
+ return UpdateControl.patchStatus(resource);
+ }
+
+ @Override
+ public ErrorStatusUpdateControl updateErrorStatus(
+ HiveCluster resource, Context context, Exception e) {
+ LOG.error("Error reconciling HiveCluster: {}/{}",
+ resource.getMetadata().getNamespace(),
+ resource.getMetadata().getName(), e);
+
+ HiveClusterStatus status = resource.getStatus() != null
+ ? resource.getStatus() : new HiveClusterStatus();
+
+ List existingConditions = status.getConditions() != null
+ ? status.getConditions() : Collections.emptyList();
+
+ status.setConditions(List.of(
+ buildCondition("Ready", "False", "ReconciliationError",
+ e.getMessage(), existingConditions)
+ ));
+ status.setObservedGeneration(resource.getMetadata().getGeneration());
+ resource.setStatus(status);
+
+ return ErrorStatusUpdateControl.patchStatus(resource);
+ }
+
+ private HiveClusterStatus buildStatus(HiveCluster resource,
+ Context context, HiveClusterStatus existingStatus) {
+
+ HiveClusterStatus status = new HiveClusterStatus();
+ status.setObservedGeneration(resource.getMetadata().getGeneration());
+
+ List existingConditions = existingStatus != null && existingStatus.getConditions() != null
+ ? existingStatus.getConditions() : Collections.emptyList();
+ List conditions = new ArrayList<>();
+
+ // Schema Init status
+ boolean schemaReady;
+ if (resource.getSpec().metastore().isEnabled()) {
+ schemaReady = context.getSecondaryResource(Job.class)
+ .map(j -> j.getStatus() != null && j.getStatus().getSucceeded() != null && j.getStatus().getSucceeded() >= 1)
+ .orElse(false);
+ } else {
+ schemaReady = true;
+ }
+
+ conditions.add(buildCondition("SchemaInitialized", schemaReady ? "True" : "False",
+ schemaReady ? "JobCompleted" : "JobPending",
+ schemaReady ? "Schema initialized successfully" : "Schema initialization pending",
+ existingConditions));
+
+ // Metastore status
+ boolean metastoreReady;
+ if (resource.getSpec().metastore().isEnabled()) {
+ ComponentStatus metastoreStatus =
+ buildComponentStatus(context, Deployment.class, resource.getMetadata().getName() + "-metastore",
+ resource.getSpec().metastore().replicas(),
+ d -> d.getStatus() != null && d.getStatus().getReadyReplicas() != null ?
+ d.getStatus().getReadyReplicas() :
+ 0);
+ status.setMetastore(metastoreStatus);
+
+ metastoreReady = metastoreStatus.getReadyReplicas() >= metastoreStatus.getDesiredReplicas()
+ && metastoreStatus.getDesiredReplicas() > 0;
+
+ conditions.add(buildCondition("MetastoreReady", metastoreReady ? "True" : "False",
+ metastoreReady ? "DeploymentReady" : "DeploymentNotReady",
+ metastoreReady ? "Metastore is ready" : "Metastore not yet ready", existingConditions));
+ } else {
+ metastoreReady = true;
+ conditions.add(buildCondition("MetastoreReady", "True", "ExternalMetastore", "Using external Hive Metastore",
+ existingConditions));
+ }
+
+ // HiveServer2 status
+ ComponentStatus hs2Status = buildComponentStatus(context, Deployment.class,
+ resource.getMetadata().getName() + "-hiveserver2",
+ resource.getSpec().hiveServer2().replicas(),
+ d -> d.getStatus() != null && d.getStatus().getReadyReplicas() != null ? d.getStatus().getReadyReplicas() : 0);
+ status.setHiveServer2(hs2Status);
+
+ boolean hs2Ready =
+ hs2Status.getReadyReplicas() >= hs2Status.getDesiredReplicas() && hs2Status.getDesiredReplicas() > 0;
+ conditions.add(buildCondition("HiveServer2Ready", hs2Ready ? "True" : "False",
+ hs2Ready ? "DeploymentReady" : "DeploymentNotReady",
+ hs2Ready ? "HiveServer2 is ready" : "HiveServer2 not yet ready",
+ existingConditions));
+
+ // LLAP status (optional)
+ if (resource.getSpec().llap().isEnabled()) {
+ status.setLlap(buildComponentStatus(context, StatefulSet.class,
+ resource.getMetadata().getName() + "-llap",
+ resource.getSpec().llap().replicas(),
+ s -> s.getStatus() != null && s.getStatus().getReadyReplicas() != null ?
+ s.getStatus().getReadyReplicas() : 0));
+ }
+
+ // TezAM status (optional)
+ if (resource.getSpec().tezAm().isEnabled()) {
+ status.setTezAm(buildComponentStatus(context, StatefulSet.class, resource.getMetadata().getName() + "-tezam",
+ resource.getSpec().tezAm().replicas(),
+ s -> s.getStatus() != null &&
+ s.getStatus().getReadyReplicas() != null ? s.getStatus().getReadyReplicas() : 0));
+ }
+
+ // Overall Ready condition
+ boolean allReady = schemaReady && metastoreReady && hs2Ready;
+ conditions.add(buildCondition("Ready", allReady ? "True" : "False",
+ allReady ? "AllComponentsReady" : "ComponentsNotReady",
+ allReady ? "All Hive components are ready" : "One or more components are not ready",
+ existingConditions));
+
+ status.setConditions(conditions);
+ return status;
+ }
+
+ /**
+ * Unified helper to build status for Deployments, StatefulSets, or any HasMetadata type
+ * that tracks replicas. Filters by Kubernetes resource name from the informer cache.
+ */
+ private ComponentStatus buildComponentStatus(
+ Context context, Class resourceClass, String expectedResourceName,
+ int desiredReplicas, Function readyExtractor) {
+
+ ComponentStatus cs = new ComponentStatus();
+ cs.setDesiredReplicas(desiredReplicas);
+
+ int ready = context.getSecondaryResources(resourceClass).stream()
+ .filter(r -> r.getMetadata().getName().equals(expectedResourceName))
+ .findFirst()
+ .map(readyExtractor)
+ .orElse(0);
+
+ cs.setReadyReplicas(ready);
+ cs.setPhase(ready >= desiredReplicas && desiredReplicas > 0 ? "Running" : "Pending");
+ return cs;
+ }
+
+ private Condition buildCondition(String type, String conditionStatus,
+ String reason, String message, List existingConditions) {
+
+ Condition condition = new Condition();
+ condition.setType(type);
+ condition.setStatus(conditionStatus);
+ condition.setReason(reason);
+ condition.setMessage(message);
+
+ // Preserve lastTransitionTime when the condition status has not changed
+ String preservedTime = existingConditions.stream()
+ .filter(c -> type.equals(c.getType()) && conditionStatus.equals(c.getStatus()))
+ .map(Condition::getLastTransitionTime)
+ .findFirst()
+ .orElse(null);
+
+ condition.setLastTransitionTime(preservedTime != null ? preservedTime : Instant.now().toString());
+ return condition;
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/HadoopXmlBuilder.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/HadoopXmlBuilder.java
new file mode 100644
index 000000000000..a7735beea976
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/HadoopXmlBuilder.java
@@ -0,0 +1,71 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.util;
+
+import java.util.Map;
+import java.util.TreeMap;
+
+/**
+ * Builds Hadoop-style XML configuration file content from a property map.
+ * The output format matches standard Hadoop configuration files as used by
+ * Hive, HDFS, and Tez.
+ */
+public final class HadoopXmlBuilder {
+
+ private HadoopXmlBuilder() {
+ }
+
+ /**
+ * Renders a property map as a Hadoop-style XML configuration string.
+ *
+ * @param properties key-value pairs to include in the configuration
+ * @return XML string in Hadoop configuration format
+ */
+ public static String buildXml(Map properties) {
+ StringBuilder sb = new StringBuilder();
+ sb.append("\n");
+ sb.append("\n");
+ sb.append("\n");
+ if (properties != null) {
+ // Sort by key for deterministic XML output regardless of Map implementation
+ for (Map.Entry entry : new TreeMap<>(properties).entrySet()) {
+ sb.append(" \n");
+ sb.append(" ").append(escapeXml(entry.getKey()))
+ .append("\n");
+ sb.append(" ").append(escapeXml(entry.getValue()))
+ .append("\n");
+ sb.append(" \n");
+ }
+ }
+ sb.append("\n");
+ return sb.toString();
+ }
+
+ private static String escapeXml(String value) {
+ if (value == null) {
+ return "";
+ }
+ return value
+ .replace("&", "&")
+ .replace("<", "<")
+ .replace(">", ">")
+ .replace("\"", """)
+ .replace("'", "'");
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/HiveConfigBuilder.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/HiveConfigBuilder.java
new file mode 100644
index 000000000000..2e506febf132
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/HiveConfigBuilder.java
@@ -0,0 +1,179 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.util;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+import org.apache.hive.kubernetes.operator.model.HiveClusterSpec;
+import org.apache.hive.kubernetes.operator.model.spec.DatabaseConfig;
+import org.apache.hive.kubernetes.operator.model.spec.HadoopSpec;
+import org.apache.hive.kubernetes.operator.model.spec.LlapSpec;
+import org.apache.hive.kubernetes.operator.model.spec.MetastoreSpec;
+
+/**
+ * Single source of truth for all Hive component configuration properties.
+ * Both ConfigMap dependents and Deployment/StatefulSet dependents call these
+ * methods, ensuring the config hash always matches the actual ConfigMap content.
+ */
+public final class HiveConfigBuilder {
+
+ private HiveConfigBuilder() {
+ }
+
+ /** Builds hive-site.xml properties for HiveServer2 and TezAM. */
+ public static Map getHiveServer2HiveSite(
+ HiveCluster hiveCluster, HiveClusterSpec spec) {
+ Map props = new LinkedHashMap<>();
+ boolean tezAmEnabled = spec.tezAm().isEnabled();
+ String zkQuorum = spec.zookeeper().quorum();
+
+ String metastoreUri = spec.metastore().isEnabled()
+ ? "thrift://" + hiveCluster.getMetadata().getName() + "-metastore:9083"
+ : spec.metastore().externalUri();
+ if (metastoreUri != null && !metastoreUri.isEmpty()) {
+ props.put("hive.metastore.uris", metastoreUri);
+ }
+ props.put("hive.metastore.warehouse.dir", spec.metastore().warehouseDir());
+ props.put("hive.server2.enable.doAs", "false");
+ props.put("hive.tez.exec.inplace.progress", "false");
+ props.put("hive.tez.exec.print.summary", "true");
+ props.put("hive.jar.directory", "/tmp");
+ props.put("hive.user.install.directory", "/tmp");
+ if (tezAmEnabled) {
+ props.put("hive.exec.local.scratchdir", "/opt/hive/scratch");
+ }
+
+ if (tezAmEnabled) {
+ props.put("hive.server2.tez.use.external.sessions", "true");
+ props.put("hive.server2.tez.external.sessions.namespace",
+ "/tez-external-sessions/tez_am/server");
+ props.put("hive.server2.tez.external.sessions.registry.class",
+ "org.apache.hadoop.hive.ql.exec.tez."
+ + "ZookeeperExternalSessionsRegistryClient");
+ props.put("hive.zookeeper.quorum", zkQuorum);
+ props.put("tez.am.framework.mode", "STANDALONE_ZOOKEEPER");
+ props.put("tez.am.registry.namespace", "/tez_am/server");
+ props.put("tez.am.zookeeper.quorum", zkQuorum);
+ LlapSpec llap = spec.llap();
+ if (llap.isEnabled()) {
+ props.put("hive.execution.mode", "llap");
+ props.put("hive.llap.execution.mode", "all");
+ props.put("hive.llap.daemon.service.hosts", llap.serviceHosts());
+ }
+ } else {
+ props.put("hive.server2.tez.use.external.sessions", "false");
+ props.put("tez.local.mode", "true");
+ props.put("tez.am.framework.mode", "LOCAL");
+ props.put("mapreduce.framework.name", "local");
+ }
+
+ if (spec.hiveServer2().configOverrides() != null) {
+ props.putAll(spec.hiveServer2().configOverrides());
+ }
+ return props;
+ }
+
+ /** Builds tez-site.xml properties for HiveServer2 and TezAM. */
+ public static Map getTezSite(HiveClusterSpec spec) {
+ boolean tezAmEnabled = spec.tezAm().isEnabled();
+ String zkQuorum = spec.zookeeper().quorum();
+
+ Map tezProps = new LinkedHashMap<>();
+ tezProps.put("tez.am.mode.session", "true");
+ tezProps.put("tez.ignore.lib.uris", "true");
+ tezProps.put("tez.am.tez-ui.webservice.enable", "false");
+ tezProps.put("tez.am.disable.client-version-check", "true");
+ tezProps.put("tez.session.am.dag.submit.timeout.secs", "-1");
+ tezProps.put("tez.am.zookeeper.quorum", zkQuorum);
+ tezProps.put("hive.zookeeper.quorum", zkQuorum);
+ if (tezAmEnabled) {
+ tezProps.put("tez.local.mode", "false");
+ tezProps.put("tez.am.framework.mode", "STANDALONE_ZOOKEEPER");
+ tezProps.put("tez.am.registry.namespace", "/tez_am/server");
+ } else {
+ tezProps.put("tez.local.mode", "true");
+ }
+
+ LlapSpec llap = spec.llap();
+ if (llap.isEnabled()) {
+ tezProps.put("hive.llap.daemon.service.hosts", llap.serviceHosts());
+ }
+
+ if (spec.tezAm().configOverrides() != null) {
+ tezProps.putAll(spec.tezAm().configOverrides());
+ }
+ return tezProps;
+ }
+
+ /** Builds core-site.xml properties from hadoop.coreSiteOverrides. */
+ public static Map getHadoopCoreSite(HiveClusterSpec spec) {
+ Map props = new LinkedHashMap<>();
+ HadoopSpec hadoop = spec.hadoop();
+ if (hadoop != null && hadoop.coreSiteOverrides() != null) {
+ props.putAll(hadoop.coreSiteOverrides());
+ }
+ return props;
+ }
+
+ /** Builds metastore-site.xml properties. */
+ public static Map getMetastoreSite(HiveClusterSpec spec) {
+ MetastoreSpec metastore = spec.metastore();
+ Map props = new LinkedHashMap<>();
+
+ props.put("metastore.warehouse.dir", metastore.warehouseDir());
+
+ DatabaseConfig db = metastore.database();
+ if (db != null) {
+ if (db.url() != null) {
+ props.put("javax.jdo.option.ConnectionURL", db.url());
+ }
+ if (db.driver() != null) {
+ props.put("javax.jdo.option.ConnectionDriverName", db.driver());
+ }
+ if (db.username() != null) {
+ props.put("javax.jdo.option.ConnectionUserName", db.username());
+ }
+ }
+
+ if (metastore.configOverrides() != null) {
+ props.putAll(metastore.configOverrides());
+ }
+ return props;
+ }
+
+ /** Builds llap-daemon-site.xml properties. */
+ public static Map getLlapDaemonSite(HiveClusterSpec spec) {
+ LlapSpec llap = spec.llap();
+ Map props = new LinkedHashMap<>();
+
+ props.put("hive.llap.daemon.memory.per.instance.mb",
+ String.valueOf(llap.memoryMb()));
+ props.put("hive.llap.daemon.num.executors",
+ String.valueOf(llap.executors()));
+ props.put("hive.llap.daemon.service.hosts", llap.serviceHosts());
+ props.put("hive.zookeeper.quorum", spec.zookeeper().quorum());
+
+ if (llap.configOverrides() != null) {
+ props.putAll(llap.configOverrides());
+ }
+ return props;
+ }
+}
diff --git a/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/Labels.java b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/Labels.java
new file mode 100644
index 000000000000..dcf0cc43b3c6
--- /dev/null
+++ b/packaging/src/kubernetes/src/java/org/apache/hive/kubernetes/operator/util/Labels.java
@@ -0,0 +1,69 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.hive.kubernetes.operator.util;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+import org.apache.hive.kubernetes.operator.model.HiveCluster;
+
+/** Standard Kubernetes label and selector helpers following recommended label conventions. */
+public final class Labels {
+
+ public static final String APP_NAME = "app.kubernetes.io/name";
+ public static final String APP_INSTANCE = "app.kubernetes.io/instance";
+ public static final String APP_COMPONENT = "app.kubernetes.io/component";
+ public static final String MANAGED_BY = "app.kubernetes.io/managed-by";
+ public static final String MANAGED_BY_VALUE = "hive-kubernetes-operator";
+
+ private Labels() {
+ }
+
+ /**
+ * Returns the full set of labels for a component's Kubernetes resource.
+ *
+ * @param hc the HiveCluster resource
+ * @param component component name (metastore, hiveserver2, llap, tezam, schema-init)
+ * @return label map
+ */
+ public static Map forComponent(HiveCluster hc,
+ String component) {
+ Map labels = new LinkedHashMap<>();
+ labels.put(APP_NAME, "apache-hive");
+ labels.put(APP_INSTANCE, hc.getMetadata().getName());
+ labels.put(APP_COMPONENT, component);
+ labels.put(MANAGED_BY, MANAGED_BY_VALUE);
+ return labels;
+ }
+
+ /**
+ * Returns the minimal selector labels for matching pods of a component.
+ *
+ * @param hc the HiveCluster resource
+ * @param component component name
+ * @return selector map
+ */
+ public static Map selectorForComponent(HiveCluster hc,
+ String component) {
+ Map selector = new LinkedHashMap<>();
+ selector.put(APP_INSTANCE, hc.getMetadata().getName());
+ selector.put(APP_COMPONENT, component);
+ return selector;
+ }
+}
diff --git a/packaging/src/kubernetes/src/resources/log4j2.xml b/packaging/src/kubernetes/src/resources/log4j2.xml
new file mode 100644
index 000000000000..f906eb0fdf29
--- /dev/null
+++ b/packaging/src/kubernetes/src/resources/log4j2.xml
@@ -0,0 +1,29 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/pom.xml b/pom.xml
index 05507d09a4fe..4481607165db 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,6 +99,8 @@
3.1.0
2.16.0
3.6.0
+ 5.3.4
+ 7.7.0
3.5.3
2.7.10
2.3.0