[HBASE-22578] HFileCleaner should not delete empty ns/table directories used for user san snapshot feature

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-1, 2.3.0
• Hadoop Flags: Reviewed

Release Note

The HFileCleaner will clean the empty directories under archive, but if enable user scan snaphot feature, the user ACLs are set at there directories, so please config the following cleaner to make the directories with user ACLs not be cleaned:
hbase.master.hfilecleaner.plugins=org.apache.hadoop.hbase.security.access.SnapshotScannerHDFSAclCleaner

• Assignee: Yi Mei
• Reporter: Yi Mei
• Created: 13/Jun/19 12:06
• Updated: 18/Oct/19 17:56
• Resolved: 25/Jul/19 03:18

Description

HBASE-21995 add a coprocessor to set HDFS acls for HBase users who own HBase read permission to mask users have the ability to scan snapshot directly.

It creates empty directories for namespace and table under archive directory and set HDFS acls to these directories after namespace or table is created, in this way, users can read files under archive directory.

But the HFileCleaner will delete empty directories and this will break this feature. So if the user scan snapshot feature is enabled, HFileCleaner should not delete empty ns/table directories.

Issue Links

• links to: GitHub Pull Request #337