Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14705

Add batched interface reencryptEncryptedKeys to KMS

          Details

          • Type: Improvement
          • Status: Resolved
          • Priority: Major
          • Resolution: Fixed
          • Affects Version/s: None
          • Fix Version/s: 3.0.0-beta1
          • Component/s: kms
          • Labels:
            None

            Description

            HADOOP-13827 already enabled the KMS to re-encrypt a EncryptedKeyVersion.

            As the performance results of HDFS-10899 turns out, communication overhead with the KMS occupies the majority of the time. So this jira proposes to add a batched interface to re-encrypt multiple EDEKs in 1 call.

              Attachments

              1. HADOOP-14705.01.patch
                42 kB
                Xiao Chen
              2. HADOOP-14705.02.patch
                46 kB
                Xiao Chen
              3. HADOOP-14705.03.patch
                59 kB
                Xiao Chen
              4. HADOOP-14705.04.patch
                58 kB
                Xiao Chen
              5. HADOOP-14705.05.patch
                58 kB
                Xiao Chen
              6. HADOOP-14705.06.patch
                61 kB
                Xiao Chen
              7. HADOOP-14705.07.patch
                62 kB
                Xiao Chen
              8. HADOOP-14705.08.patch
                62 kB
                Xiao Chen
              9. HADOOP-14705.09.patch
                65 kB
                Xiao Chen
              10. HADOOP-14705.10.patch
                65 kB
                Xiao Chen
              11. HADOOP-14705.11.patch
                66 kB
                Xiao Chen

                Issue Links

                causes

                Sub-task - The sub-task of the issue HADOOP-15214 Make Hadoop compatible with Guava 21.0

                • Minor - Minor loss of function, or other problem where easy workaround is present.
                • Resolved
                is depended upon by

                New Feature - A new feature of the product, which has yet to be developed. HDFS-10899 Add functionality to re-encrypt EDEKs

                • Major - Major loss of function.
                • Resolved
                requires

                Improvement - An improvement or enhancement to an existing feature or task. HADOOP-14779 Refactor decryptEncryptedKey in KeyProviderCryptoExtension

                • Minor - Minor loss of function, or other problem where easy workaround is present.
                • Resolved

                  Activity

                    People

                    • Assignee:
                      xiaochen Xiao Chen
                      Reporter:
                      xiaochen Xiao Chen
                    • Votes:
                      0 Vote for this issue
                      Watchers:
                      6 Start watching this issue

                      Dates

                      • Created:
                        Updated:
                        Resolved: