Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-6891

Follow-on work for transparent data at rest encryption

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.5.0
    • Fix Version/s: None
    • Component/s: encryption
    • Labels:
      None

      Description

      This is an umbrella JIRA to track remaining subtasks from HDFS-6134.

        Attachments

          Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-10856 HarFileSystem and HarFs support for HDFS encryption

          • Major - Major loss of function.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. HDFS-6134 Transparent data at rest encryption

          • Major - Major loss of function.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10983 Ability to fetch the KMS ACLs for a given key

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-7087 Ability to list /.reserved

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. MAPREDUCE-6040 distcp should automatically use /.reserved/raw when run by the superuser

          • Major - Major loss of function.
          • Patch Available
          1.
          		 Create FileStatus isEncrypted() method Sub-task Closed Charles Lamb
          2.
          		 Create an XAttr that disallows the HDFS admin from accessing a file Sub-task Closed Charles Lamb
          3.
          		 Correctly persist raw namespace xattrs to edit log and fsimage Sub-task Closed Charles Lamb
          4.
          		 Add additional unit tests for encryption zones Sub-task Closed Stephen Chu
          5.
          		 DistributedFileSystem must get delegation tokens from configured KeyProvider Sub-task Closed Zhe Zhang
          6.
          		 Additional user documentation for HDFS encryption. Sub-task Closed Andrew Wang
          7.
          		 Verify that alternate access methods work properly with Data at Rest Encryption Sub-task Resolved Charles Lamb
          8.
          		 Refactor EncryptionZoneWithId and EncryptionZone Sub-task Closed Charles Lamb
          9.
          		 Add WebHDFS support for reading and writing to encryption zones Sub-task Closed Charles Lamb
          10.
          		 Add test to verify encryption zone creation after NameNode restart without saving namespace Sub-task Closed Stephen Chu
          11.
          		 Move startFile EDEK retries to the DFSClient Sub-task Closed Andrew Wang
          12.
          		 Move CipherSuite xattr information up to the encryption zone root Sub-task Closed Zhe Zhang
          13.
          		 Update KeyProvider instantiation to create by URI Sub-task Closed Andrew Wang
          14.
          		 Add NFS Gateway support for reading and writing to encryption zones Sub-task Closed Charles Lamb
          15.
          		 Expose FileStatus#isEncrypted in libhdfs Sub-task Closed Colin McCabe
          16.
          		 Separate CipherSuite from crypto protocol version Sub-task Closed Andrew Wang
          17.
          		 Fix listEZs to work correctly with snapshots Sub-task Closed Andrew Wang
          18.
          		 Remove EncryptionZoneManager.NULL_EZ Sub-task Closed Charles Lamb
          19.
          		 Fix hftp to work with encryption Sub-task Closed Charles Lamb
          20.
          		 Unit test for creating encryption zone on root path Sub-task Closed Zhe Zhang
          21.
          		 DFSClient should instantiate a KeyProvider, not a KeyProviderCryptoExtension Sub-task Closed Andrew Wang
          22.
          		 Remove incorrect precondition check on key length in FileEncryptionInfo Sub-task Closed Andrew Wang
          23.
          		 Populate EDEK cache when creating encryption zone Sub-task Closed Yi Liu
          24.
          		 Add a metric for number of encryption zones Sub-task Resolved Rakesh Radhakrishnan
          25.
          		 DFS getEZForPath API on a non-existent file should throw FileNotFoundException Sub-task Resolved Rakesh Radhakrishnan

            Activity

              People

              • Assignee:
                clamb Charles Lamb
                Reporter:
                andrew.wang Andrew Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: