[
https://issues.apache.org/jira/browse/PARQUET-1938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17228702#comment-17228702
]
ASF GitHub Bot commented on PARQUET-1938:
-----------------------------------------
gszadovszky commented on a change in pull request #842:
URL: https://github.com/apache/parquet-mr/pull/842#discussion_r519957562
##########
File path:
parquet-hadoop/src/main/java/org/apache/parquet/crypto/keytools/KeyToolkit.java
##########
@@ -206,9 +206,10 @@ String getEncodedWrappedKEK() {
public static void rotateMasterKeys(String folderPath, Configuration
hadoopConfig)
throws IOException, ParquetCryptoRuntimeException,
KeyAccessDeniedException, UnsupportedOperationException {
- if (hadoopConfig.getBoolean(KEY_MATERIAL_INTERNAL_PROPERTY_NAME,
KEY_MATERIAL_INTERNAL_DEFAULT)) {
+ if (hadoopConfig.getBoolean(KEY_MATERIAL_INTERNAL_PROPERTY_NAME, false)) {
throw new UnsupportedOperationException("Key rotation is not supported
for internal key material");
}
+ hadoopConfig.setBoolean(KEY_MATERIAL_INTERNAL_PROPERTY_NAME, false);
Review comment:
It is not common to set a value in the hadoop conf in our code base. I
would expect some comments about why this is necessary. Also, I am not sure if
this would not impact the caller. If the caller gives us a hadoop Configuration
object we should not modify it.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Option to get KMS details from key material (in key rotation)
> -------------------------------------------------------------
>
> Key: PARQUET-1938
> URL: https://issues.apache.org/jira/browse/PARQUET-1938
> Project: Parquet
> Issue Type: Improvement
> Reporter: Gidon Gershinsky
> Assignee: Maya Anderson
> Priority: Major
>
> Currently, key rotation uses explicit parameters to get the KMS details.
> Instead, it can extract these details from the key material files - this is
> more convenient for a user. Still, the explicit parameters (if provided) will
> override these values
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
