[MAPREDUCE-4551] Key Protection : Add ability to read keys and protect keys in JobClient and TTS/NodeManagers

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Component/s: job submission, security
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 13/Aug/12 16:44
• Updated: 16/Oct/17 19:42
• Resolved: 16/Oct/17 19:42

Description

Based on Cluster configuration, NodeManager/TaskTrackers set up Decrypters to decrypt the job's secrets.
Based on Job configuration, JobClient reads secrets from a KeyStore using a Keyprovider implementation and encrypts them using the cluster's public key.

The encrypted secrets are stored in Job Credentials.

The task addresses the following requirements:

• Plug in different key store mechanisms.
• Retrieve specified keys from a configured keystore as part of job submission
• Protect keys during its transport through the cluster.
• Make sure that keys are handed over only to the tasks of the correct job.