-
Notifications
You must be signed in to change notification settings - Fork 9.2k
HADOOP-17912. ABFS: Support for Encryption Context #6221
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
HADOOP-17912. ABFS: Support for Encryption Context #6221
Conversation
|
💔 -1 overall
This message was automatically generated. |
|
@steveloughran , thank you so much for reviewing the last iteration of code-change on #3440. It really helped improve the code. Have taken your comments. Requesting you to kindly review the PR please. Thank you so much. |
|
🎊 +1 overall
This message was automatically generated. |
|
:::: AGGREGATED TEST RESULT :::: HNS-OAuth[INFO] Results: HNS-SharedKey[INFO] Results: NonHNS-SharedKey[INFO] Results: AppendBlob-HNS-OAuth[INFO] Results: Time taken: 61 mins 7 secs. |
|
🎊 +1 overall
This message was automatically generated. |
|
💔 -1 overall
This message was automatically generated. |
|
🎊 +1 overall
This message was automatically generated. |
steveloughran
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1 pending the rebase to deal with changed tests.
|
:::: AGGREGATED TEST RESULT :::: HNS-OAuth[INFO] Results: HNS-SharedKey[INFO] Results: NonHNS-SharedKey[INFO] Results: AppendBlob-HNS-OAuth[INFO] Results: Time taken: 48 mins 55 secs. |
Thank you so much @steveloughran . I have back-merged trunk. Thanks. |
|
🎊 +1 overall
This message was automatically generated. |
This reverts commit 241fb9b.
|
Hi @steveloughran, thank you so much for the approval. I have back-merged the trunk. Also, I have added the documentation in abfs.md for the new configs added. Thank you so much. |
|
🎊 +1 overall
This message was automatically generated. |
|
Hi @steveloughran , thank you so much for reviewing and approving the PR. I have backmerged the trunk and removed the conflict. Also, I have added the documentation in abfs.md for the new configs added. Thank you so much. |
|
Hi @steveloughran , thank you so much for reviewing and approving the PR. Requesting you to kindly merge the PR please. Kindly let me please know if you see any issue. Thank you very much. |
|
Hi @steveloughran , kind reminder for the merge of the PR. Kindly let me please know if you see any probable issue with the merge. Thank you very much. |
steveloughran
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1
There's a few checkstyles, but they are all related to the test code and this has been ready to merge for a while.
Contributed by Pranav Saxena and others.
|
Thank you much @steveloughran for reviewing and approving. Have raised #6401 for backport in branch-3.3. Thank you so much. |
Contributed by Pranav Saxena and others.
Contributed by Pranav Saxena and others.
This is a revival of PR #3440. The author of the PR has left the team and hence creating a new PR (as new changes (backmerge with trunk, comment-resolution) can't be pushed to the original pr).
Description of the pr:
PR introduces use of different customer-provided keys per encrypted file, superseding the global key use in HADOOP-17536.
Adding ABFS driver support for an EncryptionContextProvider plugin to retrieve encryption information, the implementation for which should be provided by the client. When encryption is activated for an account, file creation will involve ABFS driver fetching an encryption context and encryption key from the provider. These will be sent as request headers to the server, which handles encryption/decryption. The server will store the encryption context as system metadata for a file. Any subsequent REST calls to the server to access data or user metadata will require sending the encryption key headers. The encryption context of a file can be obtained through response headers of a GetPathStatus call, and then used to fetch the encryption key from the encryption provider.
New configs:
fs.azure.encryption.encoded.client-provided-key: Server side encryption key encoded in Base6formatfs.azure.encryption.encoded.client-provided-key-sha: SHA256 hash of encryption key encoded in Base64formatfs.azure.encryption.context.provider.type: Custom EncryptionContextProvider type:::: AGGREGATED TEST RESULT ::::
HNS-OAuth
[INFO] Results:
[INFO]
[WARNING] Tests run: 141, Failures: 0, Errors: 0, Skipped: 5
[INFO] Results:
[INFO]
[ERROR] Failures:
[ERROR] ITestAzureBlobFileSystemRandomRead.testValidateSeekBounds:269->Assert.assertTrue:42->Assert.fail:89 There should not be any network I/O (elapsedTimeMs=90).
[ERROR] Errors:
[ERROR] ITestAzureBlobFileSystemLease.testAcquireRetry:334 » TestTimedOut test timed o...
[INFO]
[ERROR] Tests run: 546, Failures: 1, Errors: 1, Skipped: 24
[INFO] Results:
[INFO]
[ERROR] Failures:
[ERROR] ITestSmallWriteOptimization.testSmallWriteOptimization:324->formulateSmallWriteTestAppendPattern:437->assertOpStats:499->AbstractAbfsIntegrationTest.assertAbfsStatistics:528->Assert.assertEquals:647->Assert.failNotEquals:835->Assert.fail:89 Mismatch in connections_made expected:<6> but was:<7>
[INFO]
[ERROR] Tests run: 339, Failures: 1, Errors: 0, Skipped: 41
HNS-SharedKey
[INFO] Results:
[INFO]
[WARNING] Tests run: 141, Failures: 0, Errors: 0, Skipped: 5
[INFO] Results:
[INFO]
[ERROR] Errors:
[ERROR] ITestAzureBlobFileSystemLease.testAcquireRetry:329 » TestTimedOut test timed o...
[ERROR] ITestAzureBlobFileSystemLease.testTwoWritersCreateAppendWithInfiniteLeaseEnabled:186->twoWriters:154 » TestTimedOut
[INFO]
[ERROR] Tests run: 557, Failures: 0, Errors: 2, Skipped: 24
NonHNS-SharedKey
[INFO] Results:
[INFO]
[WARNING] Tests run: 141, Failures: 0, Errors: 0, Skipped: 11
[INFO] Results:
[INFO]
[ERROR] Errors:
[ERROR] ITestAzureBlobFileSystemLease.testAcquireRetry:329 » TestTimedOut test timed o...
[ERROR] ITestAzureBlobFileSystemLease.testTwoWritersCreateAppendWithInfiniteLeaseEnabled:186->twoWriters:154 » TestTimedOut
[INFO]
[ERROR] Tests run: 544, Failures: 0, Errors: 2, Skipped: 264
[INFO] Results:
[INFO]
[WARNING] Tests run: 339, Failures: 0, Errors: 0, Skipped: 44
AppendBlob-HNS-OAuth
[INFO] Results:
[INFO]
[WARNING] Tests run: 141, Failures: 0, Errors: 0, Skipped: 5
[INFO] Results:
[INFO]
[ERROR] Errors:
[ERROR] ITestAzureBlobFileSystemLease.testAcquireRetry:329 » TestTimedOut test timed o...
[INFO]
[ERROR] Tests run: 548, Failures: 0, Errors: 1, Skipped: 24
[INFO] Results:
[INFO]
[WARNING] Tests run: 339, Failures: 0, Errors: 0, Skipped: 41
Time taken: 55 mins 18 secs.
azureuser@Hadoop-VM-EAST2:
/hadoop/hadoop-tools/hadoop-azure$/hadoop/hadoop-tools/hadoop-azure$ git logazureuser@Hadoop-VM-EAST2:
commit 8c08370 (HEAD -> saxenapranav/HADOOP-17912, origin/saxenapranav/HADOOP-17912)
Author: Pranav Saxena <>
Date: Thu Oct 26 05:39:54 2023 -0700