Bulk Operation

HDDS-4 Add retry to kinit command in smoketests

HDDS-4 Update ratis dependency to 0.3.0

HDDS-4 Inconsistent naming convention with Ozone Kerberos configuration

HDDS-4 ozone spark job failing with class not found error for hadoop 2

HDDS-4 NPE if secure ozone if KMS uri is not defined.

HDDS-4 Spark job fails to create ozone rpc client

HDDS-4 Fix MalformedTracerStateStringException on DN logs

HDDS-4 KeyOutputStream#write throws ArrayIndexOutOfBoundsException when running RandomWrite MR examples

HDDS-4 Support TokenIssuer interface for running jobs with OzoneFileSystem

HDDS-4 Fix checkstyle issue from Nightly run

HDDS-4 Set OmKeyArgs#refreshPipeline flag properly to avoid reading from stale pipeline

HDDS-4 Refactor ozone acceptance test to allow run in secure mode

HDDS-4 Fix failure in TestOzoneManagerHttpServer & TestStorageContainerManagerHttpServer

HDDS-4 Fix checkstyle issue from Nightly run

HDDS-4 Add ozone delegation token utility subcmd for Ozone CLI

HDDS-4 OM delegation expiration time should use Time.now instead of Time.monotonicNow

HDDS-4 Fix incorrect Ozone ClientProtocol KerberosInfo annotation

HDDS-4 BaseHttpServer NPE is HTTP policy is HTTPS_ONLY

HDDS-4 Change name of ozoneManager service in docker compose files to om

HDDS-4 Change hadoop-runner and apache/hadoop base image to use Java8

HDDS-4 Fix ClassNotFound issue with javax.xml.bind.DatatypeConverter used by DefaultProfile

HDDS-4 Fix jdk 11 issue for ozonesecure base image and docker-compose

HDDS-4 Support getDelegationToken API for OzoneFileSystem

HDDS-4 Allow persisting X509CertImpl to SCM certificate table

HDDS-4 Ozone serialization codec for Ozone S3 secret table

HDDS-4 DN get OM certificate from SCM CA for block token validation

HDDS-4 OM get the certificate from SCM CA for token validation

HDDS-4 OzoneManager NPE reading private key file.

HDDS-4 OzoneManager need to login during init when security is enabled.

HDDS-4 Fix findbugs issues in DefaultCertificateClient#handleCase

HDDS-4 SCM CA: Write Certificate information to SCM Metadata

HDDS-4 Fix TestDefaultCertificateClient#testSignDataStream

HDDS-4 Implement OM init in secure cluster

HDDS-4 Enable service policy authorization for HDDS group

HDDS-4 DelegationToken: Add certificate serial id to Ozone Delegation Token Identifier

HDDS-4 Add API to get OM certificate from SCM CA

HDDS-4 Refactor om token db as column family.

HDDS-4 Enable token based authentication for S3 api

HDDS-4 OzoneManager fails to connect with secure SCM

HDDS-4 Support Service Level Authorization for Ozone

HDDS-4 Add Default CertificateClient implementation

HDDS-4 Fix TestOzoneManagerRatisServer.testIsReadOnlyCapturesAllCmdTypeEnums

HDDS-4 Adding getOMCertificate in SCMSecurityProtocol

HDDS-4 Manage ozone security tokens with ozone shell cli

HDDS-4 Fix classnotfound error for bouncy castle classes in OM,SCM init

HDDS-4 Fix failures in TestOzoneConfigurationFields

HDDS-4 Fix test failure in TestOmMetrics

HDDS-4 Fix failure in TestOzoneShell due to null check in SecurityConfig

HDDS-4 Add cli command option for getS3Secret

HDDS-4 SCM CA: Add CA to SCM.

HDDS-4 Fix generics warnings in delegation token

HDDS-4 Add block token validation in HddsDispatcher/XceiverServer

HDDS-4 Fix TestOzoneConfigrationFields

HDDS-4 Add Client APIs for using S3 Auth interface

HDDS-4 Create an S3 Auth Table

HDDS-4 Remove ozone.max.key.len property

HDDS-4 Document ozone.max.key.len usage

HDDS-4 Fix merge issue that causes NPE OzoneManager#httpServer

HDDS-4 Fix TestSecureOzoneContainer NPE after HDDS-837

HDDS-4 Add TokenIdentifier Ozone for delegation token and block token

HDDS-4 Block token: Client api changes for block token

HDDS-4 Block token: Add secret token manager

HDDS-4 Add an interface for CA and Clients for Certificate operations

HDDS-4 Add asf license to TestCertificateSignRequest

HDDS-4 SCM security protocol server is not starting

HDDS-4 Update MiniOzoneCluster to work with security protocol from SCM

HDDS-4 Fix the Dependency convergence issue on HDDS-4

HDDS-4 Bootstrap genesis SCM(CA) with self-signed certificate.

HDDS-4 Fix HDDS-4 branch after HDDS-490 and HADOOP-15832

HDDS-4 Ratis: Support secure gRPC endpoint with mTLS for Ratis

HDDS-4 Add robot test for OM Block Token

HDDS-4 Add robot test for OM Delegation Token

HDDS-4 SCM CA: DN sends CSR and uses certificate issued by SCM

HDDS-4 GRPC: DN changes to use cert issued by SCM for GRPC mTLS

HDDS-4 Fix ozone-secure.robot test

HDDS-4 Adding ASF license header to kadm5.acl

HDDS-4 SelfSignedCertificate#generateCertificate should sign the certificate the configured security provider

HDDS-4 Bootstrap DN with private/public key pair

HDDS-4 Bootstrap OM/SCM with private/public key pair

HDDS-4 Move OzoneSecure docker-compose after HDDS-447

HDDS-4 Create a Self-Signed Certificate

HDDS-4 Fix secure docker and configs

HDDS-4 Resolve bouncy castle dependency for hadoop-hdds-common

HDDS-4 Unblock certain SCM client APIs from SCM#checkAdminAccess

HDDS-4 SCM CA: Update DelegationKey to retrieve private/public key

HDDS-4 SCM CA: OM sends CSR and uses certificate issued by SCM

HDDS-4 GRPC: Support secure gRPC endpoint with mTLS

HDDS-4 SCM CA: Add new security protocol for SCM to expose security related functions

HDDS-4 SCM CA: SCM CA server signs certificate for approved CSR

HDDS-4 SCM CA: generate CSR for SCM CA clients

HDDS-4 SCM CA: generate public/private key pair for SCM/OM/DNs

HDDS-4 Adding Ozone Manager Audit Log

HDDS-4 Fix config names for secure ksm and scm

HDDS-4 Add kdc docker image for secure ozone cluster

HDDS-4 Add GRPC protocol interceptors for Ozone Block Token

HDDS-4 Add OzoneManager Delegation Token support

HDDS-4 Enable kerberos auth for Ozone client in hadoop rpc

HDDS-4 Enable SCM kerberos auth

HDDS-4 Enable OzoneManager kerberos auth