hadoop-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Aneela Saleem <ane...@platalytics.com>
Subject Re: Encrypt a directory using some key (JAVA)
Date Thu, 15 Dec 2016 13:47:13 GMT
Thanks Wellington,

I already looked into that. But those KMS HTTP REST API are only for key
management like create key, rollover key, delete key etc. I didn't see any
API for encrypting a zone. If there exist any, then do tell me please!

Thanks Wei-Chiu,

I looked into that. I'm able to create and encrypt the zone by using the
following code from CryptoAdmin class:

Path deepZone = new Path("/d/e/e/p/zone");
fsWrapper.mkdir(deepZone, FsPermission.getDirDefault(), true);
dfsAdmin.createEncryptionZone(deepZone, TEST_KEY, NO_TRASH);

On Thu, Dec 15, 2016 at 1:55 AM, Wei-Chiu Chuang <weichiu@cloudera.com>

> Hi
> If you have access to Hadoop codebase, take a look at CryptoAdmin class,
> which implements these two commands.
> Internally, the commands are implemented via DistributedFileSystem#createEncryptionZone
> and DistributedFileSystem#listEncryptionZones
> Regards,
> Wei-Chiu Chuang
> A very happy Clouderan
> On Dec 14, 2016, at 5:39 AM, Aneela Saleem <aneela@platalytics.com> wrote:
> Hi,
> I have successfully enables Hadoop with KMS and now I want to write some
> java code to create key, get keys and encrypt a directory using a key. In
> other words, I want to translate this command
> hdfs hdfs crypto -createZone -keyName <key_name> -path /encryption_zone
> and
> hdfs hdfs crypto -listZones
> into java code.
> Any suggestions will be appreciated.
> Thanks

View raw message