[HDDS-4006] Disallow MPU on encrypted buckets.

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Labels: pull-request-available
• Target Version/s: 1.0.0
• Assignee: Bharat Viswanadham
• Reporter: Bharat Viswanadham
• Created: 22/Jul/20 18:22
• Updated: 23/Jul/20 16:51
• Resolved: 23/Jul/20 16:51

Description

With HDDS-3612 buckets created via ozone are also accessible via S3.
This has caused a problem when the bucket is encrypted, the keys are not encrypted on disk.

2 Issues:
1. On OM, for each part a new encryption info is generated. During complete Multipart upload, the encryption info is not stored in KeyInfo.
2. On the client, for part upload, the encryption info is silently ignored.

If we don't throw an error, on an encrypted bucket, key data is not encrypted on disks.
For 0.6.0 release, we can mark this as not supported, and this will be fixed in next release by HDDS-4005

Issue Links

• is a clone of: HDDS-4005 Support S3 MPU on encrypted buckets
• links to: GitHub Pull Request #1241