[
https://issues.apache.org/jira/browse/HADOOP-13190?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HADOOP-13190:
-------------------------------------
Attachment: HADOOP-13190.002.patch
Thanks [~xiaochen] for reviewing the patch.
bq. Maybe we can change the current $H3 level title to Using Multiple Instances
of KMS, and list the current LB/VIP and the new LBKMSCP under it? The other
sub-sections (kerberos, secret-sharing) applies to multiple instances in
general.
Good idea.
bq. In the new LBKMSCP section, please also add the failure-handling behavior.
If a request to a KMSCP failed, LBKMSCP will retry the next KMSCP. The request
is returned as failure only if all KMSCPs failed.
Done.
bq. In the sample xml, maybe also list an http example?
Not sure how to best capture this. I found the section _KMS Client
Configuration_ is vague, so I put up an example of configuring NameNode as a
KMS client here.
> LoadBalancingKMSClientProvider should be documented
> ---------------------------------------------------
>
> Key: HADOOP-13190
> URL: https://issues.apache.org/jira/browse/HADOOP-13190
> Project: Hadoop Common
> Issue Type: Improvement
> Components: documentation, kms
> Affects Versions: 2.7.0
> Reporter: Wei-Chiu Chuang
> Assignee: Wei-Chiu Chuang
> Labels: supportability
> Attachments: HADOOP-13190.001.patch, HADOOP-13190.002.patch
>
>
> Currently, there are two ways to achieve KMS HA.
> The first one, and the only documented one, is running multiple KMS instances
> behind a load balancer.
> https://hadoop.apache.org/docs/stable/hadoop-kms/index.html
> The other way, is make use of LoadBalancingKMSClientProvider which is added
> in HADOOP-11620. However the usage is undocumented.
> I think we should update the KMS document to introduce
> LoadBalancingKMSClientProvider, provide examples, and also update
> kms-site.xml to explain it.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
