hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Zhe Zhang (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HDFS-9244) Support nested encryption zones
Date Sat, 30 Jan 2016 00:44:40 GMT

     [ https://issues.apache.org/jira/browse/HDFS-9244?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Zhe Zhang updated HDFS-9244:
    Attachment: HDFS-9244.02.patch

Extending {{testEncryptionZoneWithTrash}} to verify behavior of nested EZs.

Assume we have {{/topEZ/nestedEZ}}. The current Trash logic (in particular {{DistributedFileSystem#getTrashRoot}}),
considers {{nestedEZ}} to be root dir of an EZ ({{ez.getPath().equals(absSrc)}}). Therefore
when we remove {{nesteEZ}} it goes to {{/users/username/.Trash/topEZ/nestedEZ}}. As part of
the rm, {{{{/users/username/.Trash/topEZ}} will be created. Later when we rm {{/topEZ}}, there
will be a name clash and {{/users/username/.Trash/topEZxxxx}} will be created, {{xxxx}} is
timestamp. So all deleted data is still in Trash, but additional recovery logic is needed.

If we want to avoid this we should update {{DistributedFileSystem#getTrashRoot}} to check
if the parent of the given path is in an EZ (or is an EZ itself). We can either add the logic
in {{getTrashRoot}} or add an API in {{EncryptionZoneManager}}. Once we reach an agreement
I'll update the patch.

> Support nested encryption zones
> -------------------------------
>                 Key: HDFS-9244
>                 URL: https://issues.apache.org/jira/browse/HDFS-9244
>             Project: Hadoop HDFS
>          Issue Type: New Feature
>          Components: encryption
>            Reporter: Xiaoyu Yao
>            Assignee: Zhe Zhang
>         Attachments: HDFS-9244.00.patch, HDFS-9244.01.patch, HDFS-9244.02.patch
> This JIRA is opened to track adding support of nested encryption zone based on [~andrew.wang]'s
[comment |https://issues.apache.org/jira/browse/HDFS-8747?focusedCommentId=14654141&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-14654141]
for certain use cases.

This message was sent by Atlassian JIRA

View raw message