[HADOOP-17389] KMS should log full UGI principal

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.2, 3.3.1, 3.4.0, 3.2.3
• Fix Version/s: 3.2.2, 3.3.1, 3.4.0, 3.2.3
• Component/s: kms
• Labels: pull-request-available
• Target Version/s: 3.2.2, 3.3.1, 3.4.0, 3.2.3
• Hadoop Flags: Reviewed
• Assignee: Ahmed Hussein
• Reporter: Ahmed Hussein
• Created: 19/Nov/20 21:51
• Updated: 11/Feb/24 07:01
• Resolved: 04/Dec/20 00:34

Description

daryn reported that the kms-audit log only logs the short username:
OK[op=GENERATE_EEK, key=key1, user=hdfs, accessCount=4206, interval=10427ms]

In this example, it's impossible to tell which NN(s) requested EDEKs when they are all lumped together.

Issue Links

• links to: GitHub Pull Request #2476