[
https://issues.apache.org/jira/browse/HDFS-10899?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Xiao Chen updated HDFS-10899:
-----------------------------
Attachment: HDFS-10899.01.patch
Uploading patch 1 ready for review. Note I included HADOOP-13827's patch 3 to
kick off a pre-commit, please only review HDFS code here.
After a quick offline discussion with [~andrew.wang], we decided to handle
renames in another jira, to ease review.
Some left items, mostly marked as TODO in the code too:
- rename: HDFS-11203.
- More testing against snapshots. (and add the append case above)
- status command
- Think more about the metrics (expose to jmx etc.)
- Better throttling logic. Also, batch contacting KMS may or may not be needed,
pending some benchmark runs. I'll do it this week.
Appreciate your feedback!
> Add functionality to re-encrypt EDEKs.
> --------------------------------------
>
> Key: HDFS-10899
> URL: https://issues.apache.org/jira/browse/HDFS-10899
> Project: Hadoop HDFS
> Issue Type: New Feature
> Components: encryption, kms
> Reporter: Xiao Chen
> Assignee: Xiao Chen
> Attachments: HDFS-10899.01.patch, HDFS-10899.wip.2.patch,
> HDFS-10899.wip.patch, Re-encrypt edek design doc.pdf
>
>
> Currently when an encryption zone (EZ) key is rotated, it only takes effect
> on new EDEKs. We should provide a way to re-encrypt EDEKs after the EZ key
> rotation, for improved security.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
