Repository: hadoop
Updated Branches:
refs/heads/branch-2 e84d508c1 -> 78d6dd414
HADOOP-14095. Document caveats about the default JavaKeyStoreProvider in KMS.
(cherry picked from commit d7ecac379a02876919d3e6081d42f0937f54e664)
Conflicts:
hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo
Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/78d6dd41
Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/78d6dd41
Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/78d6dd41
Branch: refs/heads/branch-2
Commit: 78d6dd414ae83a1fa6e199405502b4246d09ae98
Parents: e84d508
Author: Xiao Chen <[email protected]>
Authored: Fri Sep 29 19:17:32 2017 -0700
Committer: Xiao Chen <[email protected]>
Committed: Fri Sep 29 19:34:50 2017 -0700
----------------------------------------------------------------------
hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm | 2 ++
1 file changed, 2 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/hadoop/blob/78d6dd41/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
----------------------------------------------------------------------
diff --git a/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
b/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
index 74e84a8..30fd8c4 100644
--- a/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
+++ b/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm
@@ -71,6 +71,8 @@ The password file is looked up in the Hadoop's configuration
directory via the c
NOTE: You need to restart the KMS for the configuration changes to take effect.
+NOTE: The KMS server can choose any `KeyProvider` implementation as the
backing provider. The example here uses a JavaKeyStoreProvider, which should
only be used for experimental purposes and never be used in production. For
detailed usage and caveats of JavaKeyStoreProvider, please see [Keystore
Passwords section of the Credential Provider
API](../hadoop-project-dist/hadoop-common/CredentialProviderAPI.html#Keystore_Passwords).
+
$H3 KMS Cache
KMS has two kinds of caching: a CachingKeyProvider for caching the encryption
keys, and a KeyProvider for caching the EEKs.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
