KeyProviderCryptoExtension that pre-generates and caches encrypted
keys.KeyProviderCryptoExtension that
decorates the underlying CryptoExtension with one that eagerly
caches pre-generated Encrypted Keys using a ValueQueueKeyProvider proxy that checks whether the current user derived via
UserGroupInformation, is authorized to perform the following
type of operations on a Key :
MANAGEMENT operations : createKey, rollNewVersion, deleteKey
GENERATE_EEK operations : generateEncryptedKey, warmUpEncryptedKeys
DECRYPT_EEK operation : decryptEncryptedKey
READ operations : getKeyVersion, getKeyVersions, getMetadata,
getKeysMetadata, getCurrentKey
The read operations (getCurrentKeyVersion / getMetadata) etc are not checked.KeyProviderCryptoExtension and an
implementation of KeyACLs.KeyAuthorizationKeyProvider.AccessControlLists used by KMS,
hot-reloading them if the kms-acls.xml file where the ACLs
are defined has been updated.Maps and Lists
to their JSON representation.Copyright © 2018 CERN. All Rights Reserved.