[HDDS-7572] Use keyManager and trustManager provided by keyStoreFactory in datanode grpc services

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Done
• Fix Version/s: 1.4.0
• Component/s: Security
• Labels: pki pull-request-available
• Assignee: Sammi Chen
• Reporter: Sammi Chen
• Created: 01/Dec/22 12:05
• Updated: 10/May/23 13:26
• Resolved: 12/Dec/22 19:44

Description

Grpc services,

1. DN,  Data replication service, data read service
2. OM, Grpc service for s3
3. SCM, db checkpoint download service

Recon currently doesn't have grpc service.

 

There are also grpc services in ratis.  Will cover ratis grpc configuration change in a different Jira after new ratis snapshot is introduced(HDDS-7555).

Issue Links

• causes: HDDS-7628 Intermittent failure in TestOzoneContainerWithTLS
• causes: HDDS-7754 Download of container is failing with SSL/TLS error during re-replication
• links to: GitHub Pull Request #4032