[ https://issues.apache.org/jira/browse/HDFS-11885?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16040065#comment-16040065 ]
Xiao Chen commented on HDFS-11885: ---------------------------------- Thanks [~andrew.wang] for the new rev and [~shahrs87] for review comments! Here's my +1 to patch 003, pending jenkins and any other comments from Rushabh. (Mostly agree with Andrew on above discussions, except the future-proof mock which I'm okay either way, and the unified test change Rushabh proposed which makes sense to me.) > createEncryptionZone should not block on initializing EDEK cache > ---------------------------------------------------------------- > > Key: HDFS-11885 > URL: https://issues.apache.org/jira/browse/HDFS-11885 > Project: Hadoop HDFS > Issue Type: Bug > Components: encryption > Affects Versions: 2.6.5 > Reporter: Andrew Wang > Assignee: Andrew Wang > Priority: Critical > Attachments: HDFS-11885.001.patch, HDFS-11885.002.patch, > HDFS-11885.003.patch > > > When creating an encryption zone, we call {{ensureKeyIsInitialized}}, which > calls {{provider.warmUpEncryptedKeys(keyName)}}. This is a blocking call, > which attempts to fill the key cache up to the low watermark. > If the KMS is down or slow, this can take a very long time, and cause the > createZone RPC to fail with a timeout. -- This message was sent by Atlassian JIRA (v6.3.15#6346) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org