-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/71176/
-----------------------------------------------------------
(Updated Aug. 1, 2019, 12:57 p.m.)
Review request for ranger, Ankita Sinha, Don Bosco Durai, bhavik patel, Gautam
Borad, Abhay Kulkarni, Madhan Neethiraj, Mehul Parikh, Nikhil P, Ramesh Mani,
and Velmurugan Periasamy.
Bugs: RANGER-2497
https://issues.apache.org/jira/browse/RANGER-2497
Repository: ranger
Description
-------
User story: As a security admin, I want to escrow and manage master encryption
keys for securing my Hadoop cluster EZs in Ranger KMS service with Azure Key
Vault service.
For Microsoft Azure Key Vault overview refer to:
https://docs.microsoft.com/en-us/azure/key-vault/
For REST API guide refer to: https://docs.microsoft.com/en-us/rest/api/keyvault/
Acceptance Criteria:
1.) Ranger KMS has ability to configure AKV service to be used for master key
offload
2.) Ranger KMS provides ability to provide key management functions (create
keys, manage keys, retrieve keys, rollover) using AKV
Diffs (updated)
-----
kms/config/kms-webapp/dbks-site.xml 05a1a13
kms/pom.xml df46496
kms/scripts/DBMKTOAZUREKEYVAULT.sh PRE-CREATION
kms/scripts/install.properties 798dd8c
kms/scripts/setup.sh c430ef9
kms/src/main/java/org/apache/hadoop/crypto/key/AzureKeyVaultClientAuthenticator.java
PRE-CREATION
kms/src/main/java/org/apache/hadoop/crypto/key/DBToAzureKeyVault.java
PRE-CREATION
kms/src/main/java/org/apache/hadoop/crypto/key/JKS2RangerUtil.java 5e394de
kms/src/main/java/org/apache/hadoop/crypto/key/Ranger2JKSUtil.java f542364
kms/src/main/java/org/apache/hadoop/crypto/key/RangerKeyStore.java 86f1a29
kms/src/main/java/org/apache/hadoop/crypto/key/RangerKeyStoreProvider.java
b280cbf
kms/src/main/java/org/apache/hadoop/crypto/key/RangerKeyVaultKeyGenerator.java
PRE-CREATION
pom.xml 7cf134c
src/main/assembly/kms.xml 468bede
Diff: https://reviews.apache.org/r/71176/diff/2/
Changes: https://reviews.apache.org/r/71176/diff/1-2/
Testing
-------
1.) Fresh installation of Ranger KMS with Azure Key Vault.
2.) Export / Import of zone keys from / to keystore file.
3.) Migration of Ranger KMS DB to Azure Key Vault.
Thanks,
Dhaval Shah
