Package org.apache.hadoop.crypto.key.kms.server
package org.apache.hadoop.crypto.key.kms.server
-
ClassDescriptionorg.apache.hadoop.crypto.key.kms.server.EagerKeyGeneratorKeyProviderCryptoExtensionA
KeyProviderCryptoExtensionthat pre-generates and caches encrypted keys.org.apache.hadoop.crypto.key.kms.server.KeyAuthorizationKeyProviderAKeyProviderproxy that checks whether the current user derived viaUserGroupInformation, is authorized to perform the following type of operations on a Key : MANAGEMENT operations : createKey, rollNewVersion, deleteKey GENERATE_EEK operations : generateEncryptedKey, warmUpEncryptedKeys DECRYPT_EEK operation : decryptEncryptedKey READ operations : getKeyVersion, getKeyVersions, getMetadata, getKeysMetadata, getCurrentKey The read operations (getCurrentKeyVersion / getMetadata) etc are not checked.org.apache.hadoop.crypto.key.kms.server.KeyAuthorizationKeyProvider.KeyACLsInterface that needs to be implemented by a client of theKeyAuthorizationKeyProvider.org.apache.hadoop.crypto.key.kms.server.KMSClass providing the REST bindings, via Jersey, for the KMS.org.apache.hadoop.crypto.key.kms.server.KMSACLsProvides access to theAccessControlLists used by KMS, hot-reloading them if thekms-acls.xmlfile where the ACLs are defined has been updated.org.apache.hadoop.crypto.key.kms.server.KMSAuditProvides convenience methods for audit logging consisting different types of events.org.apache.hadoop.crypto.key.kms.server.KMSAuthenticationFilterAuthentication filter that takes the configuration from the KMS configuration file.org.apache.hadoop.crypto.key.kms.server.KMSConfigurationUtility class to load KMS configuration files.org.apache.hadoop.crypto.key.kms.server.KMSExceptionsProviderJersey provider that converts KMS exceptions into detailed HTTP errors.org.apache.hadoop.crypto.key.kms.server.KMSJSONReaderorg.apache.hadoop.crypto.key.kms.server.KMSJSONWriterJersey provider that convertsMaps andLists to their JSON representation.org.apache.hadoop.crypto.key.kms.server.KMSMDCFilterServlet filter that captures context of the HTTP request to be use in the scope of KMS calls on the server side.org.apache.hadoop.crypto.key.kms.server.KMSServerJSONUtilsJSON utility methods for the KMS.org.apache.hadoop.crypto.key.kms.server.KMSWebApporg.apache.hadoop.crypto.key.kms.server.KMSWebServerThe KMS web server.