[MAPREDUCE-6101] on job submission, if input or output directories are encrypted, shuffle data should be encrypted at rest

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.6.0
• Component/s: job submission, security
• Target Version/s: 2.8.3
• Assignee: Arun Suresh
• Reporter: Alejandro Abdelnur
• Created: 20/Sep/14 03:08
• Updated: 11/Sep/17 05:08

Description

Currently setting shuffle data at rest encryption has to be done explicitly to work. If not set explicitly (ON or OFF) but the input or output HDFS directories of the job are in an encrption zone, we should set it to ON.