apache / apache/accumulo

Add integration test for crypto service rekeys

Open
#758 6 comments 0 reactions 1 assignee Assigned to @PircDef View on GitHub
Dominant language
Java
Stars
1.2k
Forks
487
Avg merge
4d 5h
Merged PRs (30d)
13

Description

An integration test exercising the use of encrypted and unencrypted data, using multiple keys, and rekeying should be implemented. The order of events to get this in one test should look something like:

1. Start Accumulo without encryption
1. Create a table
1. Write to the table
1. Read the data
1. Stop Accumulo (in Uno, this would be 'uno stop Accumulo --no-deps')
1. Enable encryption and specify a key file
1. Restart Accumulo
1. Write to the existing table
1. Read the data (which will now be a mixture of encrypted and unencrypted data)
1. Stop Accumulo
1. Specify a new key file (leaving the old one)
1. Start Accumulo
1. Write to the existing table
1. Read the data (which should now be a mixture of encrypted data from two keys and unencrypted data)
1. Run a compaction
1. Check the RFile tails to make sure only the 2nd key is used and that all RFiles are encrypted

I suspect the Accumulo restarts are necessary to reset the configurations, but there might be a cleaner way to do that.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.