Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Duplicate
-
None
-
None
Description
The EDEK cache on the NN can hold onto keys after the admin has rolled the key. It'd be good to time-bound the caches, perhaps also providing an explicit "flush" command.
Attachments
Attachments
Issue Links
- duplicates
-
HDFS-11210 Enhance key rolling to guarantee new KeyVersion is returned from generateEncryptedKeys after a key is rolled
- Resolved