[HAWQ-1510] Add TDE-related functionality into hawq command line tools

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.3.0.0-incubating
• Component/s: Command Line Tools
• Assignee: Hongxu Ma
• Reporter: Hongxu Ma
• Created: 04/Aug/17 07:29
• Updated: 25/Sep/17 08:34
• Resolved: 25/Sep/17 08:34

Description

1, hawq init
the only way to enable tde in hawq:
user should give a key name(already created by hadoop key command) parameter when execuate the init command, it makes the whole hawq_default directory as an encryption zone.

note:

• cannot support transfer the existed(and non-empty) hawq_default directory into an encryption zone.
• create encryption zone need hdfs superuser privilege, so if hawq user and hdfs superuser is not the same one, you should create the encryption zone on hawq directory manually before running hawq-init script, example:

  hdfs crypto -createZone -keyName key_demo -path /hawq_default/
  

command:

hawq init cluster --tde_keyname key_demo

2, hawq state
show the encryption zone info if user enable tde in hawq.

3, hawq register
cannot register file in different encryption zones / un-encryption zones.

4, hawq extract
give user a warning of the table data is stored in encryption zone if user enable tde in hawq.

Issue Links

• links to: GitHub Pull Request #1280