Andrew Wang created HDFS-11885: ---------------------------------- Summary: createEncryptionZone should not block on initializing EDEK cache Key: HDFS-11885 URL: https://issues.apache.org/jira/browse/HDFS-11885 Project: Hadoop HDFS Issue Type: Bug Components: encryption Affects Versions: 2.6.5 Reporter: Andrew Wang Assignee: Andrew Wang Priority: Critical
When creating an encryption zone, we call {{ensureKeyIsInitialized}}, which calls {{provider.warmUpEncryptedKeys(keyName)}}. This is a blocking call, which attempts to fill the key cache up to the low watermark. If the KMS is down or slow, this can take a very long time, and cause the createZone RPC to fail with a timeout. -- This message was sent by Atlassian JIRA (v6.3.15#6346) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-dev-h...@hadoop.apache.org