[HADOOP-18919] Zookeeper SSL/TLS support in HDFS ZKFC

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.4.0
• Component/s: common
• Labels: pull-request-available
• Target Version/s: 3.4.0
• Hadoop Flags: Reviewed
• Assignee: Zita Dombi
• Reporter: Zita Dombi
• Created: 02/Oct/23 16:36
• Updated: 27/Jan/24 06:56
• Resolved: 23/Oct/23 18:04

Description

HADOOP-18709 added support for Zookeeper to communicate with SSL/TLS enabled in hadoop-common. With those changes we have the necessary parameters, that we need to set to enable SSL/TLS in a ZK Client.

In YARN-11468 the SSL communication can be set in Yarn, now we need to similar changes in HDFS to enable it correctly. In HDFS ZK Client is used in the Failover Controller. In this improvement we need to create the ZK client with the necessary SSL configs if we enable it, which we can track under a new HDFS config.

Issue Links

• is related to: HADOOP-18956 Zookeeper SSL/TLS support in ZKDelegationTokenSecretManager and ZKSignerSecretProvider
• links to: GitHub Pull Request #6194