Hello Tidy Bot, Alexey Serbin, Yuqi Du, Ashwani Raina, Yingchun Lai, Attila Bukor, Yifan Zhang, Kudu Jenkins, Wang Xixu,
I'd like you to reexamine a change. Please visit http://gerrit.cloudera.org:8080/19622 to look at the new patch set (#10). Change subject: KUDU-3413 [multi-tenancy] update server key for multi-tenancy ...................................................................... KUDU-3413 [multi-tenancy] update server key for multi-tenancy If we want to introduce the multi-tenant feature on the basis of data at rest encryption, we have to solve the issue of version upgrade between the two features. Such as do some refactor to create a new default tenant. In this submission, I have added a new flag '--enable_multi_tenancy' to indicate whether it is necessary to upgrade the server key to tenant key. If the flag is enabled, a default tenant will be generated using the existing server key info during bootstrap, the key information of both will be exactly the same. At the same time, the information of the server key will be preserved. The priority of tenant key is higher than that of server key, which means that if both server key info and tenants info exist in the metadata, we will use the tenants. And I also added unit tests for this upgrade process to ensure the upgrade logic is effective. Change-Id: I9e450d73940eb1dbaac6f905a46d6ccd084f15cf --- M src/kudu/consensus/raft_consensus_quorum-test.cc M src/kudu/fs/default_key_provider-test.cc M src/kudu/fs/default_key_provider.h M src/kudu/fs/dir_manager.h M src/kudu/fs/fs.proto M src/kudu/fs/fs_manager-test.cc M src/kudu/fs/fs_manager.cc M src/kudu/fs/fs_manager.h M src/kudu/fs/key_provider.h M src/kudu/fs/ranger_kms_key_provider.cc M src/kudu/fs/ranger_kms_key_provider.h M src/kudu/integration-tests/raft_consensus-itest.cc M src/kudu/mini-cluster/external_mini_cluster.cc M src/kudu/mini-cluster/external_mini_cluster.h M src/kudu/mini-cluster/internal_mini_cluster.cc M src/kudu/mini-cluster/internal_mini_cluster.h M src/kudu/ranger-kms/ranger_kms_client.cc M src/kudu/ranger-kms/ranger_kms_client.h M src/kudu/server/server_base.cc M src/kudu/server/server_base_options.cc M src/kudu/server/server_base_options.h M src/kudu/tools/kudu-tool-test.cc M src/kudu/tools/tool_action_common.cc M src/kudu/tools/tool_action_common.h M src/kudu/tools/tool_action_fs.cc M src/kudu/tools/tool_action_pbc.cc M src/kudu/tools/tool_action_wal.cc M src/kudu/tserver/tablet_copy_client-test.cc M src/kudu/tserver/tablet_server-test-base.cc M src/kudu/util/env-test.cc M src/kudu/util/env.h M src/kudu/util/env_posix.cc M src/kudu/util/flag_validators-test.cc M src/kudu/util/test_util.cc M src/kudu/util/test_util.h 35 files changed, 1,035 insertions(+), 228 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/22/19622/10 -- To view, visit http://gerrit.cloudera.org:8080/19622 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: I9e450d73940eb1dbaac6f905a46d6ccd084f15cf Gerrit-Change-Number: 19622 Gerrit-PatchSet: 10 Gerrit-Owner: KeDeng <kdeng...@gmail.com> Gerrit-Reviewer: Alexey Serbin <ale...@apache.org> Gerrit-Reviewer: Ashwani Raina <ara...@cloudera.com> Gerrit-Reviewer: Attila Bukor <abu...@apache.org> Gerrit-Reviewer: KeDeng <kdeng...@gmail.com> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241) Gerrit-Reviewer: Wang Xixu <1450306...@qq.com> Gerrit-Reviewer: Yifan Zhang <chinazhangyi...@163.com> Gerrit-Reviewer: Yingchun Lai <laiyingc...@apache.org> Gerrit-Reviewer: Yuqi Du <shenxingwuy...@gmail.com>