[AMBARI-23106] Use localjceks URL for credential provider for local files

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.6.0
• Component/s: ambari-agent
• Labels: pull-request-available
• Flags: Patch
• Assignee: Unassigned
• Reporter: Zsombor Gegesy
• Created: 28/Feb/18 14:12
• Updated: 08/Mar/18 19:25

Description

Ambari generates 'jceks://file/{filepath}' as a credential provider URL, which force using the JavaKeyStoreProvider - which uses the hdfs API to access the local file system.

This cause problems, when the local file system access from that API is disabled - for security reasons, for example in Oozie. Fortunately, there is a LocalJavaKeyStoreProvider which can be used in this case, which can be accessed with  a 'localjceks://file/{filepath}' URL

Issue Links

• links to: GitHub Pull Request #494
• links to: GitHub Pull Request #590