[HDFS-12355] Webhdfs needs to support encryption zones.

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: encryption, kms
• Target Version/s: 3.5.0
• Assignee: Rushabh Shah
• Reporter: Rushabh Shah
• Created: 25/Aug/17 15:29
• Updated: 04/Jan/24 07:17

Description

Will create a sub tasks.
1. Add fsserverdefaults to NamenodeWebhdfsMethods.
2. Return File encryption info in GETFILESTATUS call from NamenodeWebhdfsMethods
3. Adding CryptoInputStream and CryptoOutputStream to InputStream and OutputStream.
4. WebhdfsFilesystem needs to acquire kms delegation token from kms servers.

Issue Links

• depends upon: HDFS-12907 Allow read-only access to reserved raw for non-superusers
• is related to: HDFS-14709 Add encryption zone related REST APIs to WebHDFS

Sub-Tasks

• Add fsserver defaults call to WebhdfsFileSystem.: Resolved
• Webhdfs file system should get delegation token from kms provider.: Resolved
• Add CryptoInputStream to WebHdfsFileSystem read call.: Resolved
• Namenode#createFile should be /.reserved/raw/ aware.: Resolved
• Add CryptoOutputStream to WebHdfsFileSystem create call.: Open
• Add CryptoOutputStream to WebHdfsFileSystem append call.: Open