Attila Bukor has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/18192 )
Change subject: KUDU-3368 Encrypt file keys with server keys ...................................................................... KUDU-3368 Encrypt file keys with server keys This patch removes the dummy encryption key used to encrypt all file keys and introduces the server key, which is used instead on a per-server basis. The server key is stored in the instance files, currently in cleartext. Encrypting the server key will be done in a follow-up patch. Servers in internal mini-cluster are forced to use the same server key as they share an environment, but servers in external mini-cluster can use different keys. Multiple (non-default) PosixEnv instances can now be created to make this possible. Change-Id: I1884f62fde3bb110291b1d01c5e68942c6071318 Reviewed-on: http://gerrit.cloudera.org:8080/18192 Tested-by: Kudu Jenkins Reviewed-by: Alexey Serbin <[email protected]> Reviewed-by: Zoltan Chovan <[email protected]> --- M src/kudu/consensus/consensus_meta-test.cc M src/kudu/consensus/raft_consensus_quorum-test.cc M src/kudu/fs/fs.proto M src/kudu/fs/fs_manager.cc M src/kudu/fs/fs_manager.h M src/kudu/fs/log_block_manager-test.cc M src/kudu/integration-tests/log_verifier.cc M src/kudu/integration-tests/mini_cluster_fs_inspector.cc M src/kudu/integration-tests/raft_consensus-itest.cc M src/kudu/integration-tests/tablet_copy-itest.cc M src/kudu/mini-cluster/external_mini_cluster.cc M src/kudu/mini-cluster/external_mini_cluster.h M src/kudu/mini-cluster/internal_mini_cluster.cc M src/kudu/mini-cluster/internal_mini_cluster.h M src/kudu/mini-cluster/mini_cluster.h M src/kudu/server/server_base.cc M src/kudu/server/server_base_options.cc M src/kudu/server/server_base_options.h M src/kudu/tools/kudu-tool-test.cc M src/kudu/tools/tool_action_common.cc M src/kudu/tools/tool_action_common.h M src/kudu/tools/tool_action_fs.cc M src/kudu/tools/tool_action_pbc.cc M src/kudu/tools/tool_action_wal.cc M src/kudu/tserver/tablet_copy_client-test.cc M src/kudu/tserver/tablet_copy_client.cc M src/kudu/tserver/tablet_server-test-base.cc M src/kudu/util/env-test.cc M src/kudu/util/env.h M src/kudu/util/env_posix.cc M src/kudu/util/env_util.cc M src/kudu/util/file_cache-test.cc M src/kudu/util/pb_util-test.cc M src/kudu/util/test_util.cc M src/kudu/util/test_util.h 35 files changed, 413 insertions(+), 110 deletions(-) Approvals: Kudu Jenkins: Verified Alexey Serbin: Looks good to me, approved Zoltan Chovan: Looks good to me, but someone else must approve -- To view, visit http://gerrit.cloudera.org:8080/18192 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I1884f62fde3bb110291b1d01c5e68942c6071318 Gerrit-Change-Number: 18192 Gerrit-PatchSet: 8 Gerrit-Owner: Attila Bukor <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Khazar Mammadli <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Zoltan Chovan <[email protected]>
