Error moving data into an encryption zone

[#1]

Hello,

We have encrypted the hdfs /user directory in our cluster and are having issues when we try to execute a "hdfs dfs -rm" command on a file in the  hdfs /tmp directory. We get a "can't be moved into an encryption zone" because it's trying the use the "users" trash folder under /user/ directory.

We can use -skipTrash and it works fine, but we DO want to use the .Trash folder.

I know we can't move data from an encrpytion zone into a non encrypted folder, but wasn't epecting the reverse.

We can use a distcp command to copy data from an un-encrypted directory into an encryption zone, so not sure why the -rm command does not.

We've verified permissions on the directories and the kms-acls.xml

Has anyone seen this issue?

Thanks!

[#2 · Accepted solution]

A new fix with changes will come out for HUE-7676 (internally CDH-62297)

[#3]

@seth The OP's problem does not seem like a Hue problem.

[#4]

The error originated from Hue, which I failed to mention in my original post. We have tested that patch and it has solved our issue. Thanks!