You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@kudu.apache.org by "Attila Bukor (Code Review)" <ge...@cloudera.org> on 2022/07/21 19:23:55 UTC

[kudu-CR] KUDU-3385 Integrate Kudu with Ranger KMS

Hello Tidy Bot, Kudu Jenkins, 

I'd like you to reexamine a change. Please visit

    http://gerrit.cloudera.org:8080/18692

to look at the new patch set (#6).

Change subject: KUDU-3385 Integrate Kudu with Ranger KMS
......................................................................

KUDU-3385 Integrate Kudu with Ranger KMS

To make data at rest encryption actually secure, the cluster key needs
to be generated and stored securely. Hadoop/Ranger KMS was chosen for
this purpose, which are API compatible.

This patch finishes implements a Ranger KMS key provider and the Ranger
client, and also wraps up initialization of keys and policies in
MiniRanger and MiniRangerKMS.

It also removes the 'hidden' tag from the encryption-related flags as it
is now safe to use.

Change-Id: I681bed35f44cd03c1db69847c04faa460745f206
---
M build-support/dist_test.py
M build-support/run_dist_test.py
M src/kudu/consensus/raft_consensus_quorum-test.cc
M src/kudu/fs/CMakeLists.txt
R src/kudu/fs/default_key_provider-test.cc
A src/kudu/fs/default_key_provider.h
M src/kudu/fs/fs.proto
M src/kudu/fs/fs_manager.cc
M src/kudu/fs/fs_manager.h
R src/kudu/fs/key_provider.h
A src/kudu/fs/ranger_kms_key_provider.cc
A src/kudu/fs/ranger_kms_key_provider.h
M src/kudu/integration-tests/master_failover-itest.cc
M src/kudu/integration-tests/security-itest.cc
M src/kudu/mini-cluster/external_mini_cluster.cc
M src/kudu/mini-cluster/external_mini_cluster.h
M src/kudu/mini-cluster/internal_mini_cluster.cc
M src/kudu/ranger-kms/CMakeLists.txt
A src/kudu/ranger-kms/mini_ranger_kms-test.cc
M src/kudu/ranger-kms/mini_ranger_kms.cc
M src/kudu/ranger-kms/mini_ranger_kms.h
M src/kudu/ranger-kms/mini_ranger_kms_configs.h
A src/kudu/ranger-kms/ranger_kms_client.cc
A src/kudu/ranger-kms/ranger_kms_client.h
M src/kudu/ranger/mini_ranger.cc
M src/kudu/ranger/mini_ranger.h
M src/kudu/ranger/mini_ranger_configs.h
M src/kudu/ranger/ranger_client-test.cc
M src/kudu/server/CMakeLists.txt
D src/kudu/server/default_key_provider.h
M src/kudu/server/server_base.cc
M src/kudu/server/server_base_options.h
M src/kudu/tools/kudu-admin-test.cc
M src/kudu/tools/kudu-tool-test.cc
M src/kudu/tools/tool_action_common.cc
M src/kudu/tools/tool_action_fs.cc
M src/kudu/tserver/tablet_copy_client-test.cc
M src/kudu/util/env_posix.cc
38 files changed, 934 insertions(+), 170 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/92/18692/6
-- 
To view, visit http://gerrit.cloudera.org:8080/18692
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I681bed35f44cd03c1db69847c04faa460745f206
Gerrit-Change-Number: 18692
Gerrit-PatchSet: 6
Gerrit-Owner: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Tidy Bot (241)