You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@kudu.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2023/01/31 07:31:00 UTC

[jira] [Commented] (KUDU-3423) Kudu can't handle multiple Ranger KMS servers

    [ https://issues.apache.org/jira/browse/KUDU-3423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17682415#comment-17682415 ] 

ASF subversion and git services commented on KUDU-3423:
-------------------------------------------------------

Commit 57aa482673d97506c22273e5e0f37c4b43c7fb64 in kudu's branch refs/heads/master from Attila Bukor
[ https://gitbox.apache.org/repos/asf?p=kudu.git;h=57aa48267 ]

KUDU-3423 Add support for Ranger KMS HA

Ranger KMS supports high availability by listing multiple Ranger KMS
servers (comma-separated, no spaces). Up until now, Kudu allowed
configuring only one Ranger KMS server.

This patch adds support for listing multiple KMS servers. This is done
by extending EasyCurl to support multiple URLs. Kudu always attempts to
connect to the first one in the list, and if the connection fails due to
a network error or a timeout, it fails over to the next one. If a server
responds with an error, that is considered a valid response and then it
is returned immediately to the caller without trying the remaining URLs.

Change-Id: Ibef941ed20eda1f4e624c2c7e16ca7955af570d8
Reviewed-on: http://gerrit.cloudera.org:8080/19271
Tested-by: Kudu Jenkins
Reviewed-by: Alexey Serbin <al...@apache.org>


> Kudu can't handle multiple Ranger KMS servers
> ---------------------------------------------
>
>                 Key: KUDU-3423
>                 URL: https://issues.apache.org/jira/browse/KUDU-3423
>             Project: Kudu
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.17.0
>            Reporter: Attila Bukor
>            Assignee: Attila Bukor
>            Priority: Major
>
> It's possible to set up multiple Ranger KMS servers in HA, but Kudu is only able to handle one as a key provider for data at rest encryption.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)