How to use

isKMSCapable

method

in

co.cask.cdap.security.store.SecureStoreUtils

 /**
  * Adds extra dependency classes based on the given configuration.
  */
 private Set<Class<?>> addExtraDependencies(CConfiguration cConf, Set<Class<?>> dependencies) {
  // Only support HBase and KMS when running on premise
  if (clusterMode == ClusterMode.ON_PREMISE) {
   dependencies.add(HBaseTableUtilFactory.getHBaseTableUtilClass(cConf));
   if (SecureStoreUtils.isKMSBacked(cConf) && SecureStoreUtils.isKMSCapable()) {
    dependencies.add(SecureStoreUtils.getKMSSecureStore());
   }
  }

  return dependencies;
 }
}

 /**
  * Adds extra dependency classes based on the given configuration.
  */
 private Set<Class<?>> addExtraDependencies(CConfiguration cConf, Set<Class<?>> dependencies) {
  // Only support HBase and KMS when running on premise
  if (clusterMode == ClusterMode.ON_PREMISE) {
   dependencies.add(HBaseTableUtilFactory.getHBaseTableUtilClass(cConf));
   if (SecureStoreUtils.isKMSBacked(cConf) && SecureStoreUtils.isKMSCapable()) {
    dependencies.add(SecureStoreUtils.getKMSSecureStore());
   }
  }

  return dependencies;
 }
}

 @Override
 @SuppressWarnings("unchecked")
 public SecureStoreService get() {
  if (SecureStoreUtils.isFileBacked(cConf)) {
   if (Strings.isNullOrEmpty(sConf.get(Constants.Security.Store.FILE_PASSWORD))) {
    throw new IllegalArgumentException("File secure store password is not set. Please set the " +
                       "\"security.store.file.password\" property in cdap-security.xml.");
   }
   return injector.getInstance(FileSecureStoreService.class);
  }
  if (SecureStoreUtils.isKMSBacked(cConf)) {
   if (!SecureStoreUtils.isKMSCapable()) {
    throw new IllegalArgumentException("Could not find classes such as " +
                       "org.apache.hadoop.crypto.key.kms.KMSClientProvider. KMS based secure " +
                       "store is only supported in Apache Hadoop 2.6.0 and above.");
   }
   return injector.getInstance(SecureStoreUtils.getKMSSecureStore());
  }
  if (SecureStoreUtils.isNone(cConf)) {
   return injector.getInstance(DummySecureStoreService.class);
  }
  return injector.getInstance(SecretManagerSecureStoreService.class);
 }
}

if (SecureStoreUtils.isKMSBacked(cConf) && SecureStoreUtils.isKMSCapable()) {
 classes.add(SecureStoreUtils.getKMSSecureStore());

if (SecureStoreUtils.isKMSBacked(cConf) && SecureStoreUtils.isKMSCapable()) {
 classes.add(SecureStoreUtils.getKMSSecureStore());