Hadoop HDFS Change Log for HDFS-6134 and HADOOP-10150 fs-encryption (Unreleased) INCOMPATIBLE CHANGES NEW FEATURES IMPROVEMENTS HDFS-6387. HDFS CLI admin tool for creating & deleting an encryption zone. (clamb) HDFS-6386. HDFS Encryption Zones (clamb) HDFS-6388. HDFS integration with KeyProvider. (clamb) HDFS-6473. Protocol and API for Encryption Zones (clamb) HDFS-6392. Wire crypto streams for encrypted files in DFSClient. (clamb and yliu) HDFS-6476. Print out the KeyProvider after finding KP successfully on startup. (Juan Yu via wang) HDFS-6391. Get the Key/IV from the NameNode for encrypted files in DFSClient. (Charles Lamb and wang) HDFS-6389. Rename restrictions for encryption zones. (clamb) HDFS-6605. Client server negotiation of cipher suite. (wang) HDFS-6625. Remove the Delete Encryption Zone function (clamb) HDFS-6516. List of Encryption Zones should be based on inodes (clamb) HDFS-6629. Not able to create symlinks after HDFS-6516 (umamaheswararao) HDFS-6635. Refactor encryption zone functionality into new EncryptionZoneManager class. (wang) HDFS-6474. Namenode needs to get the actual keys and iv from the KeyProvider. (wang) HDFS-6619. Clean up encryption-related tests. (wang) HDFS-6405. Test Crypto streams in HDFS. (yliu via wang) HDFS-6490. Fix the keyid format for generated keys in FSNamesystem.createEncryptionZone (clamb) HDFS-6716. Update usage of KeyProviderCryptoExtension APIs on NameNode. (wang) HDFS-6718. Remove EncryptionZoneManager lock. (wang) HDFS-6720. Remove KeyProvider in EncryptionZoneManager. (wang) HDFS-6738. Remove unnecessary getEncryptionZoneForPath call in EZManager#createEncryptionZone. (clamb) OPTIMIZATIONS BUG FIXES HDFS-6733. Creating encryption zone results in NPE when KeyProvider is null. (clamb)