[ 
https://issues.apache.org/jira/browse/HDFS-13009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16335103#comment-16335103
 ] 

Daryn Sharp commented on HDFS-13009:
------------------------------------

(Rushabh is out on a long vacation)

[~andrew.wang], agree, the proposal isn't to change the default semantics.  We 
need to simplify the migration of customers with existing datasets.  Those with 
a hard retention limit, esp. short ones like 30 days, only care about 
encrypting new data because unencrypted data will be expunged as retention 
expires.  It does not address the pain of converting old data, which is exactly 
why we are investigating this feature.

Is the current limitation only based on policy?  We can't find a technical 
reason why an EZ applied to a pre-existing directory won't allow a "hybrid" 
directory of old data is unencrypted, new data is encrypted.

> Creation of Encryption zone should succeed even if directory is not empty.
> --------------------------------------------------------------------------
>
>                 Key: HDFS-13009
>                 URL: https://issues.apache.org/jira/browse/HDFS-13009
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: encryption
>            Reporter: Rushabh S Shah
>            Assignee: Rushabh S Shah
>            Priority: Major
>
> Currently we have a restriction that creation of encryption zone can be done 
> only on an empty directory.
> This jira is to remove that restriction.
> Motivation:
> New customers who wants to start using Encryption zone can make an existing 
> directory encrypted.
> They will be able to read the old data as it is  and will be decrypting the 
> newly written data.
> Internally we have many customers asking for this feature.
> Currently they have to ask for more space quota, encrypt the old data.
> This will make their life much more easier.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to