For the use case where data needs to bulk loaded into hbase from an encryption zone the documentation here https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.2/bk_security/content/hbase-with-hdfs-encr.ht... states right at the end
Workaround: run the MapReduce job as the hbase user, and specify an output directory that resides in the same encryption zone as the HBase root directory.
How would this work ?
Say there exists userA with encryption zone /user/userA on hdfs
HBase has its own encryption zone under /apps/hbase and the staging directory /apps/hbase/staging
This userA creates some sequenceFiles in /user/userA which need to be used to generate the HFiles.
How will the workaround work ? the hbase user will not have access to the sequenceFiles in /user/userA ?