{"record":{"id":"860f2ac4053ccb0c","repo":"apache/hadoop","slug":"no-key-provider-configured-re-encryption-operatio","errorCode":null,"errorMessage":"No key provider configured, re-encryption operation is rejected","messagePattern":"No key provider configured, re-encryption operation is rejected","errorType":"exception","errorClass":"IOException","httpStatus":null,"severity":"error","filePath":"hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/namenode/EncryptionZoneManager.java","lineNumber":658,"sourceCode":"    }\n    if (lastINode == null || lastINode.getId() != zoneId) {\n      return false;\n    }\n    return true;\n  }\n\n  /**\n   * Re-encrypts the given encryption zone path. If the given path is not the\n   * root of an encryption zone, an exception is thrown.\n   * @param zoneIIP encryption zone inodes in the path containing the file\n   * @param keyVersionName encryption zone version\n   * @throws IOException\n   */\n  List<XAttr> reencryptEncryptionZone(final INodesInPath zoneIIP,\n      final String keyVersionName) throws IOException {\n    assert dir.hasWriteLock();\n    if (reencryptionHandler == null) {\n      throw new IOException(\"No key provider configured, re-encryption \"\n          + \"operation is rejected\");\n    }\n    final List<XAttr> xAttrs = Lists.newArrayListWithCapacity(1);\n    final INode inode = zoneIIP.getLastINode();\n    final String zoneName = zoneIIP.getPath();\n    checkEncryptionZoneRoot(inode, zoneName);\n    if (getReencryptionStatus().hasRunningZone(inode.getId())) {\n      throw new IOException(\"Zone \" + zoneName\n          + \" is already submitted for re-encryption.\");\n    }\n    LOG.info(\"Zone {}({}) is submitted for re-encryption.\", zoneName,\n        inode.getId());\n    final XAttr xattr = FSDirEncryptionZoneOp\n        .updateReencryptionSubmitted(dir, zoneIIP, keyVersionName);\n    xAttrs.add(xattr);\n    reencryptionHandler.notifyNewSubmission();\n    return xAttrs;\n  }","sourceCodeStart":640,"sourceCodeEnd":676,"githubUrl":"https://github.com/apache/hadoop/blob/2add9630210752f88ceb1bb74eb65e37bf41da8e/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/namenode/EncryptionZoneManager.java#L640-L676","documentation":"Error \"No key provider configured, re-encryption operation is rejected\" thrown in apache/hadoop.","triggerScenarios":"reencryptEncryptionZone when no key provider is configured (hadoop.security.key.provider.path missing).","commonSituations":"See trigger scenarios.","solutions":["Configure a key provider (hadoop.security.key.provider.path) in core-site.xml before running re-encryption."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"2add9630210752f88ceb1bb74eb65e37bf41da8e","analyzedAt":"2026-08-22T19:55:07.957Z","schemaVersion":2},"datasetVersion":"2026-08-22T20:17:22.307Z"}