Mailing-List: contact common-dev-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-dev@hadoop.apache.org
Received-SPF: pass (athena.apache.org: domain of andrew.wang@cloudera.com
 designates 209.85.213.176 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAGB5D2YoX1hPtBL56D-LD3wbM3VnZgkfOm0dFNwB9bXVxqJkRg@mail.gmail.com>
References: 
 <CAGB5D2YoX1hPtBL56D-LD3wbM3VnZgkfOm0dFNwB9bXVxqJkRg@mail.gmail.com>
From: Andrew Wang <andrew.wang@cloudera.com>
Date: Fri, 8 Aug 2014 14:27:17 -0700
Message-ID: 
 <CAGB5D2a4pu5-TcWEUK=TsSPHycpKynmU4JGQowb8QqYcrvW0pA@mail.gmail.com>
Subject: Re: [VOTE] Merge fs-encryption branch to trunk
To: "common-dev@hadoop.apache.org" <common-dev@hadoop.apache.org>,
	"hdfs-dev@hadoop.apache.org" <hdfs-dev@hadoop.apache.org>
Content-Type: multipart/alternative; boundary=047d7b3a9604d58eac050024df36

--047d7b3a9604d58eac050024df36
Content-Type: text/plain; charset=UTF-8

I should add that this vote will run for the standard 7 days for a
non-release vote, so will close at 12PM Pacific on August 15th.


On Fri, Aug 8, 2014 at 11:45 AM, Andrew Wang <andrew.wang@cloudera.com>
wrote:

> Hi all,
>
> I'd like to call a vote to merge the fs-encryption branch to trunk.
> Development of this feature has been ongoing since March on HDFS-6134 and
> HADOOP-10150, totally approximately 50 commits.
>
> The fs-encryption branch introduces support for transparent, end-to-end
> encryption within an "encryption zone". Each file stored within an
> encryption zone is automatically encrypted and decrypted with a unique key.
> These per-file keys are encrypted with an encryption key only accessible by
> the client, ensuring that only the client is able to decrypt sensitive
> data. Furthermore, there is support for native, hardware-accelerated AES
> encryption. For further details, please see the design doc on HDFS-6134.
>
> In terms of merge readiness, we've posted some successful consolidated
> patches to the JIRA for Jenkins runs. distcp and fs -cp support has also
> recently been completed, allowing users to securely copy encrypted files
> without first decrypting them. There is ongoing work to add support for
> WebHDFS, HttpFS, and other alternative access methods. Stephen Chu has also
> posted a test plan, and has already identified a few issues that have been
> fixed.
>
> Design and development of this feature was also a cross-company effort
> with many different contributors.
>
> I'd like to thank Charles Lamb, Yi Liu, Uma Maheswara Rao G, Colin McCabe,
> and Juan Yu for their code contributions and reviews. Alejandro Abdelnur
> was also instrumental, doing a lot of the design work and as well as
> writing most of the Hadoop Key Mangement Server (KMS). Finally, I'd like to
> thank everyone who gave feedback on the JIRAs. This includes Owen, Sanjay,
> Larry, Mike Y, ATM, Todd, Nicholas, and Andy, among others.
>
> With that, here's my +1 to merge this to trunk.
>
> Thanks,
> Andrew
>

--047d7b3a9604d58eac050024df36--