[ 
https://issues.apache.org/jira/browse/HADOOP-14951?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18047327#comment-18047327
 ] 

ASF GitHub Bot commented on HADOOP-14951:
-----------------------------------------

github-actions[bot] commented on PR #664:
URL: https://github.com/apache/hadoop/pull/664#issuecomment-3688271520

   We're closing this stale PR because it has been open for 100 days with no 
activity. This isn't a judgement on the merit of the PR in any way. It's just a 
way of keeping the PR queue manageable.
   If you feel like this was a mistake, or you would like to continue working 
on it, please feel free to re-open it and ask for a committer to remove the 
stale tag and review again.
   Thanks all for your contribution.




> KMSACL implementation is not configurable
> -----------------------------------------
>
>                 Key: HADOOP-14951
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14951
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: kms
>            Reporter: Zsombor Gegesy
>            Assignee: Zsombor Gegesy
>            Priority: Major
>              Labels: key-management, kms
>         Attachments: HADOOP-14951-10.patch, HADOOP-14951-11.patch, 
> HADOOP-14951-12.patch, HADOOP-14951-13.patch, HADOOP-14951-9.patch
>
>
> Currently, it is not possible to customize KMS's key management, if KMSACLs 
> behaviour is not enough. If an external key management solution is used, that 
> would need a higher level API, where it can decide, if the given operation is 
> allowed, or not.
>  For this to achieve, it would be a solution, to introduce a new interface, 
> which could be implemented by KMSACLs - and also other KMS - and a new 
> configuration point could be added, where the actual interface implementation 
> could be specified.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to