Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-13930

Azure: Add Authorization support to WASB

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.8.0
    • 2.9.0, 3.0.0-alpha4
    • fs/azure
    • None
    • Reviewed

    Description

      As highlighted in HADOOP-13863, current implementation of WASB does not support authorization to any File System operations. This jira is created to add authorization support for WASB. The current approach is to enforce authorization via an external REST service (One approach could be to use component like Ranger to enforce authorization). The support for authorization would be hiding behind a configuration flag : "fs.azure.enable.authorization" and the remote service is expected to be provided via config : "fs.azure.remote.auth.service.url".

      The remote service is expected to provide support for the following REST call:

      {URL}/CHECK_AUTHORIZATION```

      An example request:{URL}

      /CHECK_AUTHORIZATION?wasb_absolute_path=<absolute_path>&operation_type=<operation type>&delegation_token=<delegation token>

      Attachments

        1. HADOOP-13930.001.patch
          44 kB
          Dushyanth
        2. HADOOP-13930.002.patch
          37 kB
          Dushyanth
        3. HADOOP-13930.003.patch
          139 kB
          Sivaguru Sankaridurg
        4. HADOOP-13930.004.patch
          139 kB
          Sivaguru Sankaridurg
        5. HADOOP-13930.005.patch
          68 kB
          Sivaguru Sankaridurg
        6. HADOOP-13930.006.patch
          68 kB
          Sivaguru Sankaridurg
        7. HADOOP-13930.007.patch
          68 kB
          Sivaguru Sankaridurg
        8. HADOOP-13930.008.patch
          69 kB
          Sivaguru Sankaridurg
        9. HADOOP-13930.009.patch
          68 kB
          Sivaguru Sankaridurg

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            sisankar@microsoft.com Sivaguru Sankaridurg
            dchickabasapa Dushyanth
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment