andyhuangdev opened a new pull request, #11526: URL: https://github.com/apache/ozone/pull/11526
## What changes were proposed in this pull request? ozone admin om fetch-key reports success without fetching SCM's current secret key because DefaultSecretKeyClient inherits an empty default implementation of refetchSecretKey(). After SCM forces a key rotation, the command continues to print OM's cached key ID. This patch forwards the refresh call to the signer client. OM also unwraps UncheckedIOException so SCM fetch failures are returned through the standard OM error response. Regression tests verify that refreshing updates the cached key, fetch failures propagate, and the CLI prints SCM's current key ID after forced rotation. ## What is the link to the Apache JIRA [HDDS-16961](https://issues.apache.org/jira/browse/HDDS-16961) ## How was this patch tested? The regression tests were first run without the fix and failed as expected. With the fix: - 40 framework secret key and token unit tests passed. - 13 integration tests passed across TestBlockTokensCLI, TestOMAdminRpcAuthorization, and TestBlockTokens. - Checkstyle and RAT checks passed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
