Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-15591

KMSClientProvider should log KMS DT acquisition at INFO level

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.1.0
    • Fix Version/s: 3.2.0
    • Component/s: kms
    • Labels:
      None
    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      We can see HDFS and Hive delegation token (DT) creation as INFO messages in Spark application logs but not for KMS DTs:

      18/06/07 10:02:35 INFO hdfs.DFSClient: Created token for admin: HDFS_DELEGATION_TOKEN owner=admin@EXAMPLE.NET, renewer=yarn, realUser=, issueDate=1528390955760, maxDate=1528995755760, sequenceNumber=125659, masterKeyId=795 on ha-hdfs:dev
      18/06/07 10:02:37 INFO hive.metastore: Trying to connect to metastore with URI thrift://hostnam.example.net:9083
      18/06/07 10:02:37 INFO hive.metastore: Opened a connection to metastore, current connections: 1
      18/06/07 10:02:37 INFO hive.metastore: Connected to metastore.
      18/06/07 10:02:37 INFO security.HiveCredentialProvider: Get Token from hive metastore: Kind: HIVE_DELEGATION_TOKEN, Service: , Ident: 00 1b 61 6e 69 73 68 2d 61 64 6d 69 6e 40 43 4f 52 50 2e 49 4e 54 55 49 54 2e 4e 45 54 04 68 69 76 65 00 8a 01 63 db 33 3a 83 8a 01 63 ff 3f be 83 8e 17 8d 8e 06 96

      Please implement KMS DT acquisition events at INFO level as it will help supportability of encrypted HDSF filesystems.

        Attachments

        1. HDFS-13716.001.patch
          2 kB
          Kitti Nanasi

          Activity

            People

            • Assignee:
              knanasi Kitti Nanasi
              Reporter:
              knanasi Kitti Nanasi
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: