KeDeng has uploaded this change for review. ( http://gerrit.cloudera.org:8080/21673
Change subject: [ranger] enhance the robustness of key retrieval ...................................................................... [ranger] enhance the robustness of key retrieval In scenarios where encryption keys are generated using Ranger, we might encounter the following error when starting the cluster: 'master_main.cc:42] Remote error: RunMasterServer() failed: Could not create new FS layout: unable to create instance metadata: failed to generate server key: HTTP 403'. This error can be resolved by simply restarting without making any changes. Upon investigation, it was found that the keys requested from Ranger have an effective period of 30 seconds, as referenced in [1]. To enhance the robustness of the Kudu code, I have added a retry mechanism for key retrieval in this patch to mitigate the impact of Ranger key activation periods on the startup process. Since there are no logical changes, no unit tests have been added. [1]https://github.com/apache/ranger/blob/4e365456f6533ee5515c5070c92e355198922c81/agents-common/src/main/java/org/apache/ranger/plugin/util/PolicyRefresher.java#L92 Change-Id: I1fd3263ad6ba6d8e444036bb7d2158986098cb4b --- M src/kudu/ranger-kms/ranger_kms_client.cc 1 file changed, 31 insertions(+), 1 deletion(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/73/21673/1 -- To view, visit http://gerrit.cloudera.org:8080/21673 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I1fd3263ad6ba6d8e444036bb7d2158986098cb4b Gerrit-Change-Number: 21673 Gerrit-PatchSet: 1 Gerrit-Owner: KeDeng <[email protected]>
