[HDDS-7830] SCM: API for OM and Datanode to get secret keys

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Labels: pull-request-available
• Assignee: Duong
• Reporter: Duong
• Created: 24/Jan/23 06:47
• Updated: 15/Mar/23 06:21
• Resolved: 15/Mar/23 06:13

Description

API for OM and Datanode to get secret keys. Including:

• getCurrentSecretKey: used by OM to fetch the current key to sign block tokens.
• getSecretKey: used by Datanodes to fetch a secret key with a given key id (encoded in the tokens sent to datanodes).
• getAllSecretKeys: allow Datanodes to proactively prefetch secret keys from SCM.

Issue Links

• links to: GitHub Pull Request #4345