[HDFS-6771] Require specification of an encryption key when creating an encryption zone

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Fix Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Component/s: security
• Target Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Assignee: Andrew Wang
• Reporter: Andrew Wang
• Created: 29/Jul/14 21:15
• Updated: 29/Jul/14 23:40
• Resolved: 29/Jul/14 23:40

Description

Currently, when creating an encryption zone, if the user does not specify a key name, the NN will generate a new one with a UUID. This leads to opaque names, and there's no way to specify further key creation attributes. Simpler and better is to make the admin first create the key however they like (e.g. via "hadoop key") and then specify it when creating a zone.