[HADOOP-17304] KMS ACL: Allow DeleteKey Operation to Invalidate Cache

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.4.0
• Component/s: kms
• Labels: pull-request-available
• Target Version/s: 3.4.0
• Hadoop Flags: Reviewed
• Assignee: Xiaoyu Yao
• Reporter: Xiaoyu Yao
• Created: 12/Oct/20 19:33
• Updated: 11/Feb/24 06:56
• Resolved: 14/Oct/20 08:31

Description

HADOOP-17208 send invalidate cache for key being deleted. The invalidate cache operation itself requires ROLLOVER permission on the key. This ticket is opened to fix the issue caught by TestKMS.testACLs.

Issue Links

• is caused by: HADOOP-17208 LoadBalanceKMSClientProvider#deleteKey should invalidateCache via all KMSClientProvider instances
• links to: GitHub Pull Request #2381