Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-6891

Follow-on work for transparent data at rest encryption

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.5.0
    • Fix Version/s: None
    • Component/s: encryption
    • Labels:
      None

      Description

      This is an umbrella JIRA to track remaining subtasks from HDFS-6134.

        Attachments

          Issue Links

          1.
          Create FileStatus isEncrypted() method Sub-task Closed Charles Lamb
          2.
          Create an XAttr that disallows the HDFS admin from accessing a file Sub-task Closed Charles Lamb
          3.
          Correctly persist raw namespace xattrs to edit log and fsimage Sub-task Closed Charles Lamb
          4.
          Add additional unit tests for encryption zones Sub-task Closed Stephen Chu
          5.
          DistributedFileSystem must get delegation tokens from configured KeyProvider Sub-task Closed Zhe Zhang
          6.
          Additional user documentation for HDFS encryption. Sub-task Closed Andrew Wang
          7.
          Verify that alternate access methods work properly with Data at Rest Encryption Sub-task Resolved Charles Lamb
          8.
          Refactor EncryptionZoneWithId and EncryptionZone Sub-task Closed Charles Lamb
          9.
          Add WebHDFS support for reading and writing to encryption zones Sub-task Closed Charles Lamb
          10.
          Add test to verify encryption zone creation after NameNode restart without saving namespace Sub-task Closed Stephen Chu
          11.
          Move startFile EDEK retries to the DFSClient Sub-task Closed Andrew Wang
          12.
          Move CipherSuite xattr information up to the encryption zone root Sub-task Closed Zhe Zhang
          13.
          Update KeyProvider instantiation to create by URI Sub-task Closed Andrew Wang
          14.
          Add NFS Gateway support for reading and writing to encryption zones Sub-task Closed Charles Lamb
          15.
          Expose FileStatus#isEncrypted in libhdfs Sub-task Closed Colin McCabe
          16.
          Separate CipherSuite from crypto protocol version Sub-task Closed Andrew Wang
          17.
          Fix listEZs to work correctly with snapshots Sub-task Closed Andrew Wang
          18.
          Remove EncryptionZoneManager.NULL_EZ Sub-task Closed Charles Lamb
          19.
          Fix hftp to work with encryption Sub-task Closed Charles Lamb
          20.
          Unit test for creating encryption zone on root path Sub-task Closed Zhe Zhang
          21.
          DFSClient should instantiate a KeyProvider, not a KeyProviderCryptoExtension Sub-task Closed Andrew Wang
          22.
          Remove incorrect precondition check on key length in FileEncryptionInfo Sub-task Closed Andrew Wang
          23.
          Populate EDEK cache when creating encryption zone Sub-task Closed Yi Liu
          24.
          Add a metric for number of encryption zones Sub-task Resolved Rakesh Radhakrishnan
          25.
          DFS getEZForPath API on a non-existent file should throw FileNotFoundException Sub-task Resolved Rakesh Radhakrishnan

            Activity

              People

              • Assignee:
                clamb Charles Lamb
                Reporter:
                andrew.wang Andrew Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: