Add support for data source credential decryption for spark

Description

Tasks:

  • Create a keystore to store a symetric key shared by both kylo-services (encrypt) and spark apps (decrypt)

  • Change Kylo deployment to generate the keystore and adding the key from the file we currently generate/use

  • Modify EncryptionService to use the keystore

  • No longer return credentials in the catalog REST API by default

  • Change our spark apps to load the EncryptionServices bean and use it to decrypt credentials

  • Update our kylo-services and spark properties to reference the keystore and keystore password

  • Update doc with instructions how to deploy and secure the keystore

Assignee

Sean Felten

Reporter

Sean Felten

Labels

None

Reviewer

None

Epic Link

Components

Sprint

None

Fix versions

Priority

High
Configure