[HADOOP-17208] LoadBalanceKMSClientProvider#deleteKey should invalidateCache via all KMSClientProvider instances

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.4
• Fix Version/s: 3.4.0
• Component/s: common
• Labels: pull-request-available
• Target Version/s: 3.4.0, 3.3.2
• Hadoop Flags: Reviewed
• Assignee: Xiaoyu Yao
• Reporter: Xiaoyu Yao
• Created: 14/Aug/20 23:09
• Updated: 27/Jan/24 06:14
• Resolved: 17/Sep/20 17:42

Description

Without invalidateCache, the deleted key may still exists in the servers' key cache (CachingKeyProvider in KMSWebApp.java) where the delete key was not hit. Client may still be able to access encrypted files by specifying to connect to KMS instances with a cached version of the deleted key before the cache entry (10 min by default) expired.

Issue Links

• causes: HADOOP-17304 KMS ACL: Allow DeleteKey Operation to Invalidate Cache
• links to: GitHub Pull Request #2259