[HADOOP-10868] Create a ZooKeeper-backed secret provider

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.1
• Fix Version/s: 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 21/Jul/14 23:08
• Updated: 25/Mar/15 18:24
• Resolved: 16/Sep/14 00:14

Description

Create a secret provider (see HADOOP-10791) that is backed by ZooKeeper and can synchronize amongst different servers.

Issue Links

• blocks: HADOOP-11016 KMS should support signing cookies with zookeeper secret manager
• breaks: HADOOP-11748 The secrets of auth cookies should not be specified in configuration in clear text
• is depended upon by: OOZIE-1917 Authentication secret should be random by default and needs to coordinate with HA
• relates to: HADOOP-11102 Downgrade curator version to 2.4.1