[IMPALA-7035] Impala HDFS Encryption tests failing after OpenJDK update

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Epic Color: ghx-label-1
• Assignee: Philip Martin
• Reporter: Philip Martin
• Created: 15/May/18 21:35
• Updated: 19/May/18 03:43
• Resolved: 17/May/18 22:32

Description

I have seen impala-py.test tests/metadata/test_hdfs_encryption.py fail with the following error:

E AssertionError: Error creating encryption zone: RemoteException: Can't recover key for testkey1 from keystore file:/home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore

I believe what's going on is described in https://issues.apache.org/jira/browse/HDFS-13494. In short, the JDK now has a special whitelist for an API as a result of a security vulnerability.

A workaround in the KMS init script to configure $HADOOP_OPTS seems to do the trick.