hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Wang (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-6546) Add non-superuser capability to get the encryption zone for a specific path
Date Wed, 16 Jul 2014 19:08:06 GMT

    [ https://issues.apache.org/jira/browse/HDFS-6546?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14063934#comment-14063934

Andrew Wang commented on HDFS-6546:

We had a request from Hive for this feature. For a table in an encryption zone, they want
to put intermediate output inside a per-zone tmp dir, rather than /tmp. The easiest way for
them to do this is being able to query the EZ for a table.

> Add non-superuser capability to get the encryption zone for a specific path
> ---------------------------------------------------------------------------
>                 Key: HDFS-6546
>                 URL: https://issues.apache.org/jira/browse/HDFS-6546
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: namenode, security
>            Reporter: Charles Lamb
>            Assignee: Charles Lamb
> Need to add protocol, api, and CLI that allows a non super user to ask whether a path
is part of an EZ, and if so, which one.
> FileStatus should have a 'boolean isEncrypted()' method. (it was in the context of discussing
with AndreW about FileStatus being a Writable).
> Having this method would allow MR JobSubmitter do the following:
> -----
> BOOLEAN intermediateEncryption = false
> IF jobconf.contains("mr.intermidate.encryption") THEN
>   intermediateEncryption = jobConf.getBoolean("mr.intermidate.encryption")
>   IF (I/O)Format INSTANCEOF File(I/O)Format THEN
>     intermediateEncryption = ANY File(I/O)Format HAS a Path with status isEncrypted()==TRUE
>   FI
>   jobConf.setBoolean("mr.intermidate.encryption", intermediateEncryption)
> FI

This message was sent by Atlassian JIRA

View raw message