[HADOOP-13437] KMS should reload whitelist and default key ACLs when hot-reloading

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.9.0, 3.0.0-alpha1, 2.8.2
• Component/s: kms
• Target Version/s: 2.9.0
• Hadoop Flags: Reviewed
• Assignee: Xiao Chen
• Reporter: Xiao Chen
• Created: 28/Jul/16 19:05
• Updated: 30/May/17 16:00
• Resolved: 16/Aug/16 01:20

Description

When hot-reloading, KMSACLs#setKeyACLs ignores whitelist and default key entries if they're present in memory.

We should reload them, hot-reload and cold-start should not have any difference in behavior.
Credit to dilaver for finding this.