Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-11885

createEncryptionZone should not block on initializing EDEK cache

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Patch Available
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.6.5
    • Fix Version/s: None
    • Component/s: encryption
    • Labels:
      None
    • Target Version/s:

      Description

      When creating an encryption zone, we call ensureKeyIsInitialized, which calls provider.warmUpEncryptedKeys(keyName). This is a blocking call, which attempts to fill the key cache up to the low watermark.

      If the KMS is down or slow, this can take a very long time, and cause the createZone RPC to fail with a timeout.

        Attachments

        1. HDFS-11885.001.patch
          20 kB
          Andrew Wang
        2. HDFS-11885.002.patch
          22 kB
          Andrew Wang
        3. HDFS-11885.003.patch
          22 kB
          Andrew Wang
        4. HDFS-11885.004.patch
          22 kB
          Andrew Wang

          Activity

            People

            • Assignee:
              andrew.wang Andrew Wang
              Reporter:
              andrew.wang Andrew Wang
            • Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

              • Created:
                Updated: