[HIVE-26632] Update DelegationTokenSecretManager current key ID to prevent erroneous database updates.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-beta-1
• Component/s: Standalone Metastore
• Labels: pull-request-available
• Target Version/s: 3.2.0, 4.0.0-alpha-2
• Assignee: Chris Nauroth
• Reporter: Chris Nauroth
• Created: 14/Oct/22 22:06
• Updated: 15/Aug/23 06:33
• Resolved: 26/Oct/22 11:51

Description

While rolling a new master key, TokenStoreDelegationTokenSecretManager does not update a base class member variable that tracks the current key ID. This can cause situations later where it attempts to update a key using an incorrect ID. This update attempt fails, even though the process had successfully generated a new master key. Since it appears to be a failure though, the thread immediately attempts to roll a new master key again, resulting in excess database load.

Issue Links

• links to: GitHub Pull Request #3673