[ https://issues.apache.org/jira/browse/HDFS-6971?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14148068#comment-14148068 ]
Zhe Zhang commented on HDFS-6971: --------------------------------- [~andrew.wang] What level of time-boundedness do we need? Is {{expireAfterAccess}} sufficient or we need {{expireAfterWrite}}? I think the latter is necessary right? > Bounded staleness of EDEK caches on the NN > ------------------------------------------ > > Key: HDFS-6971 > URL: https://issues.apache.org/jira/browse/HDFS-6971 > Project: Hadoop HDFS > Issue Type: Sub-task > Components: encryption > Affects Versions: 2.5.0 > Reporter: Andrew Wang > Assignee: Zhe Zhang > > The EDEK cache on the NN can hold onto keys after the admin has rolled the > key. It'd be good to time-bound the caches, perhaps also providing an > explicit "flush" command. -- This message was sent by Atlassian JIRA (v6.3.4#6332)