Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9341

Secret Managers should allow explicit purging of tokens and secret keys

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Resolved
    • Critical
    • Resolution: Won't Fix
    • 2.0.0-alpha, 0.23.7, 3.0.0-alpha1
    • None
    • security
    • None

    Description

      Per HDFS-4477, the fsimage retains all secret keys and uncanceled tokens forever. There should be a way to explicitly purge a secret manager of expired items w/o starting its threads.

      Attachments

        1. HADOOP-9341.branch-23.patch
          4 kB
          Daryn Sharp
        2. HADOOP-9341.patch
          4 kB
          Daryn Sharp

        Issue Links

          is depended upon by

          Sub-task - The sub-task of the issue HDFS-4539 Secret manager saves expired items

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. HDFS-4477 Secondary namenode may retain old tokens

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              daryn Daryn Sharp
              daryn Daryn Sharp
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: