Add cipher suite (AES/CTR/NoPadding) per default

[maltesander]

Description

fixes #680

The hdfs-operator now defaults to AES/CTR/NoPadding for dfs.encrypt.data.transfer.cipher.suite to improve security and performance

hdfs-site.xml:

<property>
  <name>dfs.data.transfer.protection</name>
  <value>privacy</value>
</property>
<property>
  <name>dfs.encrypt.data.transfer</name>
  <value>true</value>
</property>                                                                                  
<property>
  <name>dfs.encrypt.data.transfer.cipher.suite</name>
  <value>AES/CTR/NoPadding</value>                                                                                   
</property>

Test:

--- PASS: kuttl (608.24s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/kerberos_hadoop-3.4.1_zookeeper-latest-3.9.3_krb5-1.21.1_opa-1.4.2_kerberos-realm-PROD.MYCORP_kerberos-backend-mit_openshift-false (608.23s)

[NickLarsenNZ]

LGTM

Does this need a release-note? If so, it will also need the scheduled-for and release-note label.

[maltesander]

LGTM

Does this need a release-note? If so, it will also need the scheduled-for and release-note label.

Not sure, would let @lfrancke decide.

[lfrancke]

To answer the question: I think it's worth a release note entry

[maltesander]

Release note:

The HDFS operator now defaults `dfs.encrypt.data.transfer.cipher.suite` to `AES/CTR/NoPadding` to improve security and performance.

[NickLarsenNZ]

LGTM