hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiao Chen (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HDFS-12359) Re-encryption should operate with minimum KMS ACL requirements.
Date Fri, 25 Aug 2017 23:55:00 GMT
Xiao Chen created HDFS-12359:
--------------------------------

             Summary: Re-encryption should operate with minimum KMS ACL requirements.
                 Key: HDFS-12359
                 URL: https://issues.apache.org/jira/browse/HDFS-12359
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: encryption
    Affects Versions: 3.0.0-beta1
            Reporter: Xiao Chen
            Assignee: Xiao Chen


This was caught from KMS acl testing.

HDFS-10899 gets the current key versions from KMS directly, which requires {{READ}} acls.
It also calls invalidateCache, which requires {{MANAGEMENT}} acls.

We should fix re-encryption to not require additional ACLs than original encryption.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org


Mime
View raw message