[HBASE-12641] Grant all permissions of hbase zookeeper node to hbase superuser in a secure cluster

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.0.0, 0.98.10, 1.1.0
• Component/s: Zookeeper
• Hadoop Flags: Reviewed
• Assignee: Shaohui Liu
• Reporter: Shaohui Liu
• Created: 05/Dec/14 07:00
• Updated: 06/Apr/18 17:55
• Resolved: 28/Dec/14 05:16

Description

Currently in a secure cluster, only the master/regionserver kerberos user can manage the znode of hbase. But he master/regionserver kerberos user is for rpc connection and we usually use another super user to manage the cluster.

In some special scenarios, we need to manage the data of znode with the supper user.

eg:
a, To get the data of the znode for debugging.
b, HBASE-8253: We need to delete the znode for the corrupted hlog to avoid it block the replication.

So we grant all permissions of hbase zookeeper node to hbase superuser during creating these znodes.

Suggestions are welcomed.

apurtell