Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-11885

createEncryptionZone should not block on initializing EDEK cache

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Patch Available
    • Major
    • Resolution: Unresolved
    • 2.6.5
    • None
    • encryption
    • None

    Description

      When creating an encryption zone, we call ensureKeyIsInitialized, which calls provider.warmUpEncryptedKeys(keyName). This is a blocking call, which attempts to fill the key cache up to the low watermark.

      If the KMS is down or slow, this can take a very long time, and cause the createZone RPC to fail with a timeout.

      Attachments

        1. HDFS-11885.001.patch
          20 kB
          Andrew Wang
        2. HDFS-11885.002.patch
          22 kB
          Andrew Wang
        3. HDFS-11885.003.patch
          22 kB
          Andrew Wang
        4. HDFS-11885.004.patch
          22 kB
          Andrew Wang

        Activity

          People

            andrew.wang Andrew Wang
            andrew.wang Andrew Wang
            Votes:
            0 Vote for this issue
            Watchers:
            11 Start watching this issue

            Dates

              Created:
              Updated: