174 Commits

Author SHA1 Message Date
Xiao Chen
ff7ca472d2 HADOOP-14445. Use DelegationTokenIssuer to create KMS delegation tokens that can authenticate to all KMS instances.
Contributed by Daryn Sharp, Xiao Chen, Rushabh S Shah.
2018-10-12 12:08:38 -07:00
Jonathan Eagles
2b6d8c1e29 HADOOP-15835. Reuse Object Mapper in KMSJSONWriter (jeagles) 2018-10-10 10:32:43 -05:00
Yiqun Lin
d993a1fc3d HADOOP-15817. Reuse Object Mapper in KMSJSONReader. Contributed by Jonathan Eagles.
(cherry picked from commit 81f635f47f0737eb551bef1aa55afdf7b268253d)
2018-10-04 10:36:49 +08:00
Wei-Chiu Chuang
e99ed05444 HADOOP-15696. KMS performance regression due to too many open file descriptors after Jetty migration. Contributed by Wei-Chiu Chuang.
(cherry picked from commit e780556ae9229fe7a90817eb4e5449d7eed35dd8)

Conflicts:
	hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/http/TestHttpServer.java

(cherry picked from commit d1ea7df43d6a5623b139acbbc9992831d5c7e484)
2018-09-05 10:18:56 -07:00
Kitti Nanasi
fa32269cee HADOOP-15698. KMS log4j is not initialized properly at startup. Contributed by Kitti Nanasi.
(cherry picked from commit 781437c219dc3422797a32dc7ba72cd4f5ee38e2)
2018-08-29 22:09:13 -07:00
Xiao Chen
7730a85233 HADOOP-15638. KMS Accept Queue Size default changed from 500 to 128 in Hadoop 3.x. Contributed by Wei-Chiu Chuang.
(cherry picked from commit b94c8874e2a634637b1ef5d837f05bc5c5e8e6a6)
2018-08-13 10:41:14 -07:00
Yongjun Zhang
f0de11ba98 Preparing for 3.0.4 development 2018-05-29 23:40:26 -07:00
Xiao Chen
08cb6548c0 Revert "HADOOP-14445. Delegation tokens are not shared between KMS instances. Contributed by Xiao Chen and Rushabh S Shah."
This reverts commit 583fa6ed48ad3df40bcaa9c591d5ccd07ce3ea81.

 Conflicts:
	hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSTokenRenewer.java
	hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMS.java

(cherry picked from commit f9692eecf0029a1682ffda48551ac45507144ff0)

 Conflicts:
	hadoop-common-project/hadoop-kms/src/test/java/org/apache/hadoop/crypto/key/kms/server/TestKMS.java

(cherry picked from commit 752092a86082f77fcd4e8a28275078bbd123c801)
2018-05-07 13:56:26 -07:00
Lei Xu
3717df89ee Preparing for 3.0.3 development 2018-04-12 13:57:46 -07:00
Xiao Chen
72acda1449 HADOOP-14445. Delegation tokens are not shared between KMS instances. Contributed by Xiao Chen and Rushabh S Shah.
(cherry picked from commit 583fa6ed48ad3df40bcaa9c591d5ccd07ce3ea81)
2018-04-10 15:45:48 -07:00
Xiao Chen
46edbedd99 HADOOP-15313. TestKMS should close providers.
(cherry picked from commit c22d62b338cb16d93c4576a9c634041e3610a116)
2018-04-10 15:45:47 -07:00
Lei Xu
7b377f43d0 Preparing for 3.0.2 development 2018-02-06 10:50:37 -08:00
Jason Lowe
6e253c0391 HADOOP-15085. Output streams closed with IOUtils suppressing write errors. Contributed by Jim Brennan
(cherry picked from commit f8af0e2feb9f45aeaa9711dbf93115ffb1a07e5d)
2017-12-14 10:19:07 -06:00
Andrew Wang
1c8d334287 Preparing for 3.0.1 development 2017-11-14 11:17:18 -08:00
Wei-Chiu Chuang
cba1fa496b HADOOP-14880. [KMS] Document&test missing KMS client side configs. Contributed by Gabor Bota.
(cherry picked from commit 97c70c7ac6881f87eee1575bcbdd28b31ecac231)
2017-10-31 12:54:53 -07:00
Xiao Chen
12d19d3978 HADOOP-14944. Add JvmMetrics to KMS.
(cherry picked from commit 86ee0c5e4e304d9551a24a3d8b9161ca1502b70e)
2017-10-17 19:07:19 -07:00
Xiao Chen
23ec4a788a HADOOP-14949. TestKMS#testACLs fails intermittently.
(cherry picked from commit 152317d40ece8abfa76fb5bd29f04878c1b0d3d8)
2017-10-16 14:19:44 -07:00
Akira Ajisaka
b658ae002f
YARN-6943. Update Yarn to YARN in documentation. Contributed by Chetna Chaudhari.
(cherry picked from commit c9b525bd943fe7e098e72fb9be5623862c7ab5ff)
2017-10-04 07:02:31 +09:00
Xiao Chen
3dd3f924fc HADOOP-14095. Document caveats about the default JavaKeyStoreProvider in KMS.
(cherry picked from commit d7ecac379a02876919d3e6081d42f0937f54e664)
2017-09-29 19:34:42 -07:00
Andrew Wang
5a4f37019a Preparing for 3.0.0 GA development 2017-09-28 11:32:01 -07:00
Allen Wittenauer
a3fee475f7
HADOOP-14414. Calling maven-site-plugin directly for docs profile is unnecessary (Andras Bokor via aw) 2017-09-01 08:38:30 -07:00
Xiao Chen
4ec5acc704 HADOOP-14705. Add batched interface reencryptEncryptedKeys to KMS. 2017-08-22 07:47:39 -07:00
Sean Mackrory
1a1bf6b7d0 HADOOP-13595. Rework hadoop_usage to be broken up by clients/daemons/etc. Contributed by Allen Wittenauer. 2017-08-02 12:25:05 -06:00
John Zhuge
946dd25675 HADOOP-14608. KMS JMX servlet path not backwards compatible. Contributed by John Zhuge. 2017-07-05 11:16:56 -07:00
Andrew Wang
af2773f609 Updating version for 3.0.0-beta1 development 2017-06-29 17:57:40 -07:00
Xiao Chen
fb5ee3fafb HADOOP-14515. Addendum. Specifically configure zookeeper-related log levels in KMS log4j. 2017-06-27 23:49:09 -07:00
Xiao Chen
15964ef147 HADOOP-14515. Specifically configure zookeeper-related log levels in KMS log4j. 2017-06-19 23:12:02 -07:00
Xiao Chen
c4b5c32669 HADOOP-13854. KMS should log error details in KMSExceptionsProvider. 2017-06-08 22:35:31 -07:00
Brahma Reddy Battula
62857be211 HADOOP-14456. Modifier 'static' is redundant for inner enums. Contributed by ZhangBing Lin. 2017-05-31 01:07:58 +08:00
Andrew Wang
16ad896d5c Update maven version for 3.0.0-alpha4 development 2017-05-26 14:09:44 -07:00
Akira Ajisaka
b7d769d020
HADOOP-14359. Remove unnecessary shading of commons-httpclient. Contributed by Wei-Chiu Chuang. 2017-05-01 15:22:28 +09:00
John Zhuge
a9f07e0d3e HADOOP-14317. KMSWebServer$deprecateEnv may leak secret. Contributed by John Zhuge. 2017-04-18 09:29:16 -07:00
John Zhuge
570827a819 HADOOP-14052. Fix dead link in KMS document. Contributed by Christina Vu.
Change-Id: I7093f443d93927184196f62f02cc106a2c89e9cf
2017-03-08 23:50:15 -08:00
Andrew Wang
ec839b94c0 HDFS-11441. Add escaping to error message in KMS web UI. Contributed by Aaron T. Myers. 2017-03-06 10:47:15 -08:00
Akira Ajisaka
258342e76c HADOOP-14118. move jets3t into a dependency on hadoop-aws JAR. 2017-02-28 13:47:44 +09:00
Xiao Chen
2007e0cf2a HDFS-11210. Enhance key rolling to guarantee new KeyVersion is returned from generateEncryptedKeys after a key is rolled. 2017-02-07 20:36:11 -08:00
Xiao Chen
d88497d44a HADOOP-14047. Require admin to access KMS instrumentation servlets. Contributed by John Zhuge. 2017-02-06 13:14:17 -08:00
Xiao Chen
ebd40056a0 HADOOP-13992. KMS should load SSL configuration the same way as SSLFactory. Contributed by John Zhuge. 2017-01-27 10:49:26 -08:00
Xiaoyu Yao
2034315763 HADOOP-14029. Fix KMSClientProvider for non-secure proxyuser use case. Contributed by Xiaoyu Yao. 2017-01-26 20:34:32 -08:00
Xiao Chen
9c0a4d3e71 HADOOP-13990. Document KMS usage of CredentialProvider API. Contributed by John Zhuge. 2017-01-24 21:30:10 -08:00
Andrew Wang
5d8b80ea9b Preparing for 3.0.0-alpha3 development 2017-01-19 15:50:07 -08:00
Andrew Wang
5f336512d0 HADOOP-13961. Fix compilation failure from missing hadoop-kms test jar. Contributed by Sangjin Lee and John Zhuge. 2017-01-11 15:48:50 -08:00
Arun Suresh
be529dade1 HADOOP-13903. Improvements to KMS logging to help debug authorization errors. (Tristan Stevens via asuresh) 2017-01-11 00:26:02 -08:00
Xiao Chen
5d182949ba HADOOP-13597. Switch KMS from Tomcat to Jetty. Contributed by John Zhuge. 2017-01-05 17:21:57 -08:00
Xiao Chen
30f85d7a88 HADOOP-13911. Remove TRUSTSTORE_PASSWORD related scripts from KMS. Contributed by John Zhuge. 2016-12-20 16:02:26 -08:00
Xiao Chen
79d90b810c HADOOP-13827. Add reencryptEncryptedKey interface to KMS. 2016-12-06 12:04:04 -08:00
Xiao Chen
291df5c7fb HADOOP-13847. KMSWebApp should close KeyProviderCryptoExtension. Contributed by John Zhuge. 2016-12-05 09:35:17 -08:00
Akira Ajisaka
00096dcc0c HADOOP-13812. Upgrade Tomcat to 6.0.48. Contributed by John Zhuge. 2016-11-29 19:47:02 +09:00
Akira Ajisaka
67d9f2808e HADOOP-13706. Update jackson from 1.9.13 to 2.x in hadoop-common-project. 2016-11-29 14:07:19 +09:00
Robert Kanter
47ca9e26fb HADOOP-13838. KMSTokenRenewer should close providers (xiaochen via rkanter) 2016-11-28 18:08:09 -08:00