[HADOOP-14047] Require admin to access KMS instrumentation servlets

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha4
• Fix Version/s: 3.0.0-alpha4
• Component/s: kms
• Target Version/s: 3.0.0-alpha4
• Hadoop Flags: Reviewed
• Assignee: John Zhuge
• Reporter: John Zhuge
• Created: 02/Feb/17 01:18
• Updated: 06/Feb/17 22:18
• Resolved: 06/Feb/17 21:15

Description

Discovered during HDFS-10860 review. To require admin to access KMS instrumentation servlets, HttpServer2#setACL must be called. Add configuration property hadoop.httpfs.http.administrators, similar to dfs.cluster.administrators.

Issue Links

• depends upon: HADOOP-13597 Switch KMS from Tomcat to Jetty
• is related to: HADOOP-14060 HTTP servlet /logs should require authentication and authorization