hadoop/hadoop-hdfs-project/hadoop-hdfs/CHANGES-fs-encryption.txt

Hadoop HDFS Change Log for HDFS-6134 and HADOOP-10150

fs-encryption (Unreleased)

  INCOMPATIBLE CHANGES

  NEW FEATURES

  IMPROVEMENTS

    HDFS-6387. HDFS CLI admin tool for creating & deleting an
    encryption zone. (clamb)

    HDFS-6386. HDFS Encryption Zones (clamb)

    HDFS-6388. HDFS integration with KeyProvider. (clamb)

    HDFS-6473. Protocol and API for Encryption Zones (clamb)

    HDFS-6392. Wire crypto streams for encrypted files in
    DFSClient. (clamb and yliu)

    HDFS-6476. Print out the KeyProvider after finding KP successfully on
    startup. (Juan Yu via wang)

    HDFS-6391. Get the Key/IV from the NameNode for encrypted files in
    DFSClient. (Charles Lamb and wang)

    HDFS-6389. Rename restrictions for encryption zones. (clamb)

    HDFS-6605. Client server negotiation of cipher suite. (wang)

    HDFS-6625. Remove the Delete Encryption Zone function (clamb)

    HDFS-6516. List of Encryption Zones should be based on inodes (clamb)

    HDFS-6629. Not able to create symlinks after HDFS-6516 (umamaheswararao)

    HDFS-6635. Refactor encryption zone functionality into new
    EncryptionZoneManager class. (wang)

    HDFS-6474. Namenode needs to get the actual keys and iv from the
    KeyProvider. (wang)

    HDFS-6619. Clean up encryption-related tests. (wang)

    HDFS-6405. Test Crypto streams in HDFS. (yliu via wang)

    HDFS-6490. Fix the keyid format for generated keys in
    FSNamesystem.createEncryptionZone (clamb)

    HDFS-6716. Update usage of KeyProviderCryptoExtension APIs on NameNode.
    (wang)

    HDFS-6718. Remove EncryptionZoneManager lock. (wang)

    HDFS-6720. Remove KeyProvider in EncryptionZoneManager. (wang)

    HDFS-6738. Remove unnecessary getEncryptionZoneForPath call in
    EZManager#createEncryptionZone. (clamb)

    HDFS-6724. Decrypt EDEK before creating
    CryptoInputStream/CryptoOutputStream. (wang)

    HDFS-6509. Create a special /.reserved/raw directory for raw access to
    encrypted data. (clamb via wang)

    HDFS-6771. Require specification of an encryption key when creating
    an encryption zone. (wang)

    HDFS-6730. Create a .RAW extended attribute namespace. (clamb)

    HDFS-6692. Add more HDFS encryption tests. (wang)

    HDFS-6780. Batch the encryption zones listing API. (wang)

    HDFS-6394. HDFS encryption documentation. (wang)

  OPTIMIZATIONS

  BUG FIXES

    HDFS-6733. Creating encryption zone results in NPE when
    KeyProvider is null. (clamb)

    HDFS-6785. Should not be able to create encryption zone using path
    to a non-directory file. (clamb)

    HDFS-6807. Fix TestReservedRawPaths. (clamb)

    HDFS-6814. Mistakenly dfs.namenode.list.encryption.zones.num.responses configured
    as boolean. (umamahesh)