Peter Felker created HIVE-26464:
-----------------------------------

             Summary: New credential provider for replicating to the cloud
                 Key: HIVE-26464
                 URL: https://issues.apache.org/jira/browse/HIVE-26464
             Project: Hive
          Issue Type: Task
          Components: HiveServer2
            Reporter: Peter Felker


In {{ReplDumpTask}}, if the following *new* config is provided in {{HiveConf}}:
* {{hive.repl.cloud.credential.provider.path}}

then the HS2 credstore URI scheme, contained by {{HiveConf}} with key 
{{hadoop.security.credential.provider.path}}, should be updated so that it will 
start with new scheme: {{hiverepljceks}}. For instance:
{code}jceks://file/path/to/credstore/creds.localjceks{code}
will become:
{code}hiverepljceks://file/path/to/credstore/creds.localjceks{code}

This new scheme, {{hiverepljceks}}, will make Hadoop to load a *new* credential 
provider, which will work the following way:
# Load the HS2 keystore file
# Gets a password from the HS2 keystore file
# This password will be used to load another keystore file, located on HDFS, 
that contains the cloud credentials for the Hive cloud replication



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to