Skip to content

Add option to skip JAR downloads during pip install #302

@balakmran

Description

@balakmran

Currently, the amazon_kclpy package performs mandatory JAR downloads during pip install, which causes several challenges in enterprise environments:

  • Security Compliance:
    pip install fails when internal Nexus or Artifactory repositories flag known CVEs in the default JAR versions.

  • Flexible Dependency Management:
    Enterprise teams need the ability to manage and package approved JAR versions separately to meet internal security policies and control upgrades independently.

  • Installation Performance:
    Mandatory downloads increase pip install time, even in cases where the JARs are already packaged or retrieved via internal build pipelines.

Proposed Improvement:
Introduce options to skip JAR downloads and make them available via:

  • An optional environment variable KCL_SKIP_JAR_DOWNLOAD=1/true to bypass JAR fetching automatically during installation

This would:

  • Allow clean separation of Python packaging and Java dependencies.
  • Enable enterprises to pre-stage and control JAR dependencies.
  • Reduce installation errors and improve reproducibility.
  • Improve install performance in CI/CD pipelines.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions