Details
-
New Feature
-
Status: Patch Available
-
Major
-
Resolution: Unresolved
-
3.0.0
-
None
-
None
-
None
Description
Add zookeeper ACL for hiveserver2 is necessary for hive to protect the znode of hiveserver2 deleted by accident.
------------------
case:
when i do beeline connections throught hive HA with zookeeper, i suddenly find the beeline can not connect the hiveserve2.The reason of the problem is that others delete the /hiveserver2 falsely which cause to the beeline connection is failed and can not read the configs from zookeeper.
-----------------
as a result of the acl of /hiveserver2, the acl is set to world:anyone:cdrwa which meant to anyone easily delete the /hiveserver2 and znodes anytime.It is unsafe and necessary to protect the znode /hiveserver2.