[HBASE-28421] Add ofs (Ozone Filesystem) support for acquireDelegationToken

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: pull-request-available
• Assignee: Unassigned
• Reporter: Pratyush Bhatt
• Created: 05/Mar/24 15:40
• Updated: 07/Mar/24 05:34

Description

Currently acquireDelegationToken is hardcoded for checking swebhdfs, webhdfs and hdfs(Refer below or here).
We should add support for Ozone also. 

public void acquireDelegationToken(final FileSystem fs) throws IOException {
  String tokenKind;
  String scheme = fs.getUri().getScheme();
  if (SWEBHDFS_SCHEME.equalsIgnoreCase(scheme)) {
    tokenKind = SWEBHDFS_TOKEN_KIND.toString();
  } else if (WEBHDFS_SCHEME.equalsIgnoreCase(scheme)) {
    tokenKind = WEBHDFS_TOKEN_KIND.toString();
  } else if (HDFS_URI_SCHEME.equalsIgnoreCase(scheme)) {
    tokenKind = HDFS_DELEGATION_KIND.toString();
  } else {
    LOG.warn("Unknown FS URI scheme: " + scheme);
    // Preserve default behavior
    tokenKind = HDFS_DELEGATION_KIND.toString();
  }

  acquireDelegationToken(tokenKind, fs);
} 

This can impact jobs like BulkLoad on a secure environment.

Thanks bszabolcs for the debug help!

 

Issue Links

• is a child of: HBASE-27740 Support Ozone as a WAL backing storage
• links to: GitHub Pull Request #5746