HADOOP-14095. Document caveats about the default JavaKeyStoreProvider in KMS.
Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/06df6ab2 Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/06df6ab2 Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/06df6ab2 Branch: refs/heads/HDFS-9806 Commit: 06df6ab25432927cd55918440cc8a28fb4f03bfa Parents: 66c4171 Author: Xiao Chen <[email protected]> Authored: Fri Sep 29 19:17:32 2017 -0700 Committer: Xiao Chen <[email protected]> Committed: Fri Sep 29 19:34:29 2017 -0700 ---------------------------------------------------------------------- hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hadoop/blob/06df6ab2/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm b/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm index 1dd89e9..5490219 100644 --- a/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm +++ b/hadoop-common-project/hadoop-kms/src/site/markdown/index.md.vm @@ -80,6 +80,8 @@ The password file is looked up in the Hadoop's configuration directory via the c NOTE: You need to restart the KMS for the configuration changes to take effect. +NOTE: The KMS server can choose any `KeyProvider` implementation as the backing provider. The example here uses a JavaKeyStoreProvider, which should only be used for experimental purposes and never be used in production. For detailed usage and caveats of JavaKeyStoreProvider, please see [Keystore Passwords section of the Credential Provider API](../hadoop-project-dist/hadoop-common/CredentialProviderAPI.html#Keystore_Passwords). + $H3 KMS HTTP Configuration KMS pre-configures the HTTP port to 9600. @@ -1184,4 +1186,4 @@ and `/stacks`, configure the following properties in `kms-site.xml`: to all users and groups, e.g. '*', '* ' and ' *' are all valid. </description> </property> -``` \ No newline at end of file +``` --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
