Details
-
New Feature
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
Description
It would be beneficial for Kudu to support native encryption at rest.
While the underlying filesystem can be encrypted with Kudu on top, there are benefits to native encryption at rest:
- With native encryption support, it may be possible to specify different encryption keys for different objects or object trees (such as is possible with HDFS encryption)
- It may be possible to share a single block device with other storage, including HDFS (note that some linux setups allow for "splitting" a device)
Attachments
1.
|
Support encryption in Env layer |
|
Resolved | Attila Bukor |
2.
|
Store encrypted encryption keys in encrypted files |
|
Resolved | Attila Bukor |
3.
|
Integrate encrypted Env |
|
Resolved | Attila Bukor |
4.
|
Encrypt file keys with server keys |
|
Resolved | Attila Bukor |
5.
|
Key provider interface with a default (test-only) implementation |
|
Resolved | Attila Bukor |
6.
|
Ranger KMS key provider |
|
Resolved | Attila Bukor |