Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-11335

KMS ACL in meta data or database

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.6.0
    • Fix Version/s: None
    • Component/s: kms
    • Target Version/s:

      Description

      Currently Hadoop KMS has implemented ACL for keys and the per key ACL are stored in the configuration file kms-acls.xml.

      The management of ACL in configuration file would not be easy in enterprise usage and it is put difficulties for backup and recovery.

      It is ideal to store the ACL for keys in the key meta data similar to what file system ACL does. In this way, the backup and recovery that works on keys should work for ACL for keys too.

      On the other hand, with the ACL in meta data, the ACL of each key can be easily manipulate with API or command line tool and take effect instantly. This is very important for enterprise level access control management. This feature can be addressed by separate JIRA. While with the configuration file, these would be hard to provide.

        Attachments

        1. HADOOP-11335.001.patch
          145 kB
          Dian Fu
        2. HADOOP-11335.002.patch
          149 kB
          Dian Fu
        3. HADOOP-11335.003.patch
          158 kB
          Dian Fu
        4. HADOOP-11335.004.patch
          168 kB
          Dian Fu
        5. HADOOP-11335.005.patch
          172 kB
          Dian Fu
        6. HADOOP-11335.006.patch
          117 kB
          Dian Fu
        7. HADOOP-11335.007.patch
          89 kB
          Dian Fu
        8. HADOOP-11335.008.patch
          90 kB
          Dian Fu
        9. HADOOP-11335.re-design.patch
          28 kB
          Arun Suresh
        10. KMS ACL in metadata or database.pdf
          551 kB
          Dian Fu

          Activity

            People

            • Assignee:
              dian.fu Dian Fu
              Reporter:
              jerrychenhf Haifeng Chen
            • Votes:
              0 Vote for this issue
              Watchers:
              13 Start watching this issue

              Dates

              • Due:
                Created:
                Updated:

                Time Tracking

                Estimated:
                Original Estimate - 504h
                504h
                Remaining:
                Remaining Estimate - 504h
                504h
                Logged:
                Time Spent - Not Specified
                Not Specified