Hello Tidy Bot, Alexey Serbin, Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/18692
to look at the new patch set (#16).
Change subject: KUDU-3385 Integrate Kudu with Ranger KMS
......................................................................
KUDU-3385 Integrate Kudu with Ranger KMS
To make data at rest encryption actually secure, the cluster key needs
to be generated and stored securely. Hadoop/Ranger KMS was chosen for
this purpose, which are API compatible.
This patch implements a Ranger KMS key provider and the Ranger client,
and also wraps up initialization of keys and policies in MiniRanger and
MiniRangerKMS. KeyProvider interface and its default mplementation had
to be moved into fs/ from server/ to avoid introducing circular
dependencies.
It also removes the 'hidden' tag from the encryption-related flags as it
is now safe to use.
Change-Id: I681bed35f44cd03c1db69847c04faa460745f206
---
M build-support/dist_test.py
M build-support/run_dist_test.py
M src/kudu/consensus/raft_consensus_quorum-test.cc
M src/kudu/fs/CMakeLists.txt
R src/kudu/fs/default_key_provider-test.cc
A src/kudu/fs/default_key_provider.h
M src/kudu/fs/fs.proto
M src/kudu/fs/fs_manager.cc
M src/kudu/fs/fs_manager.h
R src/kudu/fs/key_provider.h
A src/kudu/fs/ranger_kms_key_provider.cc
A src/kudu/fs/ranger_kms_key_provider.h
M src/kudu/integration-tests/master_failover-itest.cc
M src/kudu/integration-tests/master_migration-itest.cc
M src/kudu/integration-tests/raft_consensus-itest.cc
M src/kudu/integration-tests/security-itest.cc
M src/kudu/mini-cluster/external_mini_cluster.cc
M src/kudu/mini-cluster/external_mini_cluster.h
M src/kudu/mini-cluster/internal_mini_cluster.cc
M src/kudu/ranger-kms/CMakeLists.txt
M src/kudu/ranger-kms/mini_ranger_kms.cc
M src/kudu/ranger-kms/mini_ranger_kms.h
M src/kudu/ranger-kms/mini_ranger_kms_configs.h
A src/kudu/ranger-kms/ranger_kms_client.cc
A src/kudu/ranger-kms/ranger_kms_client.h
M src/kudu/ranger/mini_ranger.cc
M src/kudu/ranger/mini_ranger.h
M src/kudu/ranger/mini_ranger_configs.h
M src/kudu/server/CMakeLists.txt
D src/kudu/server/default_key_provider.h
M src/kudu/server/server_base.cc
M src/kudu/server/server_base_options.cc
M src/kudu/server/server_base_options.h
M src/kudu/tools/kudu-admin-test.cc
M src/kudu/tools/kudu-tool-test.cc
M src/kudu/tools/tool_action_common.cc
M src/kudu/tools/tool_action_fs.cc
M src/kudu/tools/tool_action_master.cc
M src/kudu/tserver/tablet_copy_client-test.cc
M src/kudu/tserver/tablet_server-test-base.cc
M src/kudu/util/env_posix.cc
M src/kudu/util/test_util.cc
M src/kudu/util/test_util.h
43 files changed, 1,032 insertions(+), 217 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/92/18692/16
--
To view, visit http://gerrit.cloudera.org:8080/18692
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I681bed35f44cd03c1db69847c04faa460745f206
Gerrit-Change-Number: 18692
Gerrit-PatchSet: 16
Gerrit-Owner: Attila Bukor <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Tidy Bot (241)
