[HBASE-7917] Documentation for secure bulk load

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.98.0, 0.95.0
• Hadoop Flags: Reviewed
• Assignee: Enis Soztutar
• Reporter: Enis Soztutar
• Created: 23/Feb/13 03:18
• Updated: 23/Sep/13 18:31
• Resolved: 27/Feb/13 04:22

Description

One of our tests for bulk loading on a secure cluster failed, because of it was
not configured properly. We should document the setup.

From SecureBulkLoadEndpoint:

1. Create an hbase owned staging directory which is
 * world traversable (711): /hbase/staging
 * 2. A user writes out data to his secure output directory: /user/foo/data
 * 3. A call is made to hbase to create a secret staging directory
 * which globally rwx (777): /user/staging/averylongandrandomdirectoryname
 * 4. The user makes the data world readable and writable, then moves it
 * into the random staging directory, then calls bulkLoadHFiles()
 *
 * Like delegation tokens the strength of the security lies in the length
 * and randomness of the secret directory.

See HBASE-5498 for details on secure bulk load.