[HADOOP-16972] Ignore AuthenticationFilterInitializer for KMSWebServer

• Type: Improvement
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0
• Component/s: kms
• Target Version/s: 3.3.0
• Hadoop Flags: Reviewed
• Assignee: Masatake Iwasaki
• Reporter: Masatake Iwasaki
• Created: 12/Apr/20 14:25
• Updated: 06/Jan/21 14:40
• Resolved: 17/Apr/20 21:42

Description

KMS does not work if hadoop.http.filter.initializers is set to AuthenticationFilterInitializer since KMS uses its own authentication filter. This is problematic when KMS is on the same node with other Hadoop services and shares core-site.xml with them. The filter initializers configuration should be tweaked as done for httpfs in HDFS-14845.

Issue Links

• is broken by: HADOOP-16314 Make sure all end point URL is covered by the same AuthenticationFilter
• links to: GitHub Pull Request #1961