Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-24121

[Authorization] ServiceAuthorizationManager isn't dynamically updatable. And it should be.

    XMLWordPrintableJSON

    Details

    • Hadoop Flags:
      Reviewed
    • Release Note:
      Hide
      Master & RegionService now support refresh policy authorization defined in hbase-policy.xml without restarting service. To refresh policy, please execute hbase shell command: update_config or update_config_all after policy file updated and synced on all nodes.
      Show
      Master & RegionService now support refresh policy authorization defined in hbase-policy.xml without restarting service. To refresh policy, please execute hbase shell command: update_config or update_config_all after policy file updated and synced on all nodes.

      Description

      Some more background information.

      ServiceAuthorizationManager is responsible for the Services access rights defined in hbase-policy.xml which locates under $hbase_home/conf directory.

      Currently, since it doesn't support update dynamically, we need to restart master/regionservers to make configurations take effect. It is an expensive and low efficient admin operation.

      HDFS has the refreshPolicy to do that, HBase also has update_config command, we can make use of that.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                reidchan Reid Chan
                Reporter:
                reidchan Reid Chan
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: