Hello Tidy Bot, Alexey Serbin, Yuqi Du, Ashwani Raina, Yingchun Lai, Attila
Bukor, Yifan Zhang, Kudu Jenkins, Wang Xixu,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/19622
to look at the new patch set (#9).
Change subject: KUDU-3413 [multi-tenancy] update server key for multi-tenancy
......................................................................
KUDU-3413 [multi-tenancy] update server key for multi-tenancy
If we want to introduce the multi-tenant feature on the
basis of data at rest encryption, we have to solve the
issue of version upgrade between the two features. Such
as do some refactor to create a new default tenant.
In this submission, I have added a new flag '--enable_multi_tenancy'
to indicate whether it is necessary to upgrade the server key to
tenant key. If the flag is enabled, a default tenant will be
generated using the existing server key info after restart, the key
information of both will be exactly the same. At the same time,
the information of the server key will be preserved.
The priority of tenant key is higher than that of server key, which
means that if both server key info and tenants info exist in the
metadata, we will use the tenants.
And I also added unit tests for this upgrade process to ensure the
upgrade logic is effective.
Change-Id: I9e450d73940eb1dbaac6f905a46d6ccd084f15cf
---
M src/kudu/consensus/raft_consensus_quorum-test.cc
M src/kudu/fs/default_key_provider-test.cc
M src/kudu/fs/default_key_provider.h
M src/kudu/fs/dir_manager.h
M src/kudu/fs/fs.proto
M src/kudu/fs/fs_manager-test.cc
M src/kudu/fs/fs_manager.cc
M src/kudu/fs/fs_manager.h
M src/kudu/fs/key_provider.h
M src/kudu/fs/ranger_kms_key_provider.cc
M src/kudu/fs/ranger_kms_key_provider.h
M src/kudu/integration-tests/raft_consensus-itest.cc
M src/kudu/mini-cluster/external_mini_cluster.cc
M src/kudu/mini-cluster/external_mini_cluster.h
M src/kudu/mini-cluster/internal_mini_cluster.cc
M src/kudu/mini-cluster/internal_mini_cluster.h
M src/kudu/ranger-kms/ranger_kms_client.cc
M src/kudu/ranger-kms/ranger_kms_client.h
M src/kudu/server/server_base.cc
M src/kudu/server/server_base_options.cc
M src/kudu/server/server_base_options.h
M src/kudu/tools/kudu-tool-test.cc
M src/kudu/tools/tool_action_common.cc
M src/kudu/tools/tool_action_common.h
M src/kudu/tools/tool_action_fs.cc
M src/kudu/tools/tool_action_pbc.cc
M src/kudu/tools/tool_action_wal.cc
M src/kudu/tserver/tablet_copy_client-test.cc
M src/kudu/tserver/tablet_server-test-base.cc
M src/kudu/util/env-test.cc
M src/kudu/util/env.h
M src/kudu/util/env_posix.cc
M src/kudu/util/flag_validators-test.cc
M src/kudu/util/test_util.cc
M src/kudu/util/test_util.h
35 files changed, 1,006 insertions(+), 222 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/22/19622/9
--
To view, visit http://gerrit.cloudera.org:8080/19622
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I9e450d73940eb1dbaac6f905a46d6ccd084f15cf
Gerrit-Change-Number: 19622
Gerrit-PatchSet: 9
Gerrit-Owner: KeDeng <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Ashwani Raina <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: KeDeng <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Tidy Bot (241)
Gerrit-Reviewer: Wang Xixu <[email protected]>
Gerrit-Reviewer: Yifan Zhang <[email protected]>
Gerrit-Reviewer: Yingchun Lai <[email protected]>
Gerrit-Reviewer: Yuqi Du <[email protected]>
