Details
-
Bug
-
Status: Patch Available
-
Major
-
Resolution: Unresolved
-
2.6.5
-
None
-
None
Description
When creating an encryption zone, we call ensureKeyIsInitialized, which calls provider.warmUpEncryptedKeys(keyName). This is a blocking call, which attempts to fill the key cache up to the low watermark.
If the KMS is down or slow, this can take a very long time, and cause the createZone RPC to fail with a timeout.