Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 3.3.0
    • 3.3.0
    • fs/s3
    • None

    Description

      S3A to support delegation tokens where

      • an authenticated client can request a token via FileSystem.getDelegationToken()
      • Amazon's token service is used to request short-lived session secret & id; these will be saved in the token and marshalled with jobs
      • A new authentication provider will look for a token for the current user and authenticate the user if found

      This will not support renewals; the lifespan of a token will be limited to the initial duration. Also, as you can't request an STS token from a temporary session, IAM instances won't be able to issue tokens.

      Attachments

        1. HADOOP-14556-029.patch
          563 kB
          Steve Loughran
        2. HADOOP-14556-028.patch
          562 kB
          Steve Loughran
        3. HADOOP-14556-027.patch
          562 kB
          Steve Loughran
        4. HADOOP-14556-026.patch
          552 kB
          Steve Loughran
        5. HADOOP-14556-025.patch
          528 kB
          Steve Loughran
        6. HADOOP-14556-024.patch
          529 kB
          Steve Loughran
        7. HADOOP-14556-023.patch
          524 kB
          Steve Loughran
        8. HADOOP-14556-022.patch
          524 kB
          Steve Loughran
        9. HADOOP-14556-021.patch
          521 kB
          Steve Loughran
        10. HADOOP-14556-020.patch
          521 kB
          Steve Loughran
        11. HADOOP-14556-019.patch
          515 kB
          Steve Loughran
        12. HADOOP-14556-018a.patch
          493 kB
          Steve Loughran
        13. HADOOP-14556-017.patch
          476 kB
          Steve Loughran
        14. HADOOP-14556-016.patch
          444 kB
          Steve Loughran
        15. HADOOP-14556-015.patch
          427 kB
          Steve Loughran
        16. HADOOP-14556-014.patch
          412 kB
          Steve Loughran
        17. HADOOP-14556-013.patch
          408 kB
          Steve Loughran
        18. HADOOP-14556-012.patch
          371 kB
          Steve Loughran
        19. HADOOP-14556-011.patch
          364 kB
          Steve Loughran
        20. HADOOP-14556-010.patch
          360 kB
          Steve Loughran
        21. HADOOP-14556-010.patch
          360 kB
          Steve Loughran
        22. HADOOP-14556-009.patch
          327 kB
          Steve Loughran
        23. HADOOP-14556-008.patch
          310 kB
          Steve Loughran
        24. HADOOP-14556-007.patch
          225 kB
          Steve Loughran
        25. HADOOP-14556-005.patch
          112 kB
          Steve Loughran
        26. HADOOP-14556-004.patch
          104 kB
          Steve Loughran
        27. HADOOP-14556-003.patch
          116 kB
          Steve Loughran
        28. HADOOP-14556-002.patch
          87 kB
          Steve Loughran
        29. HADOOP-14556-001.patch
          87 kB
          Steve Loughran
        30. HADOOP-14556.oath-002.patch
          15 kB
          Steve Loughran
        31. HADOOP-14556.oath.patch
          14 kB
          Daryn Sharp

        Issue Links

          Activity

            People

              stevel@apache.org Steve Loughran
              stevel@apache.org Steve Loughran
              Votes:
              0 Vote for this issue
              Watchers:
              21 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: