shameersss1 commented on code in PR #6884:
URL: https://github.com/apache/hadoop/pull/6884#discussion_r1820150359
##########
hadoop-tools/hadoop-aws/src/main/java/org/apache/hadoop/fs/s3a/Constants.java:
##########
@@ -766,6 +766,40 @@ private Constants() {
public static final String S3_ENCRYPTION_CONTEXT =
"fs.s3a.encryption.context";
+ /**
+ * Client side encryption (CSE-CUSTOM) with custom cryptographic material
manager class name.
+ * Custom keyring class name for CSE-KMS.
+ * value:{@value}
+ */
+ public static final String S3_ENCRYPTION_CSE_CUSTOM_KEYRING_CLASS_NAME =
+ "fs.s3a.encryption.cse.custom.keyring.class.name";
+
+ /**
+ * Config to provide backward compatibility with V1 encryption client.
+ * Enabling this configuration will invoke the followings
+ * 1. Unencrypted s3 objects will be read using unecrypted/base s3 client
when CSE is enabled.
+ * 2. Size of encrypted object will be calculated using ranged S3 calls.
+ * 3. While listing s3 objects, encryption metadata file with suffix
+ * {@link #S3_ENCRYPTION_CSE_INSTRUCTION_FILE_SUFFIX} will be skipped.
+ * This is to provide backward compatibility with V1 client.
+ * value:{@value}
+ */
+ public static final String S3_ENCRYPTION_CSE_V1_COMPATIBILITY_ENABLED =
+ "fs.s3a.encryption.cse.v1.compatibility.enabled";
+
+ /**
+ * Default value : {@value}.
+ */
+ public static final boolean
S3_ENCRYPTION_CSE_V1_COMPATIBILITY_ENABLED_DEFAULT = false;
+
+ /**
+ * Suffix of instruction file : {@value}.
+ */
+ public static final String S3_ENCRYPTION_CSE_INSTRUCTION_FILE_SUFFIX =
".instruction";
+
+
Review Comment:
ack
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
