Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-5040

Append om1,om2,om3 to ozone.administrators config for secure OM HA docker config

    XMLWordPrintableJSON

Details

    Description

      With HDDS-4704, OM dbCheckpoint endpoint now requires ozone admin privilege to access.

      In HA, one OM might access another OM's dbCheckpoint to download DB from another OM.

      https://github.com/apache/ozone/blob/d09e4b000594494eff87a828e400fb1a1cdfb3c1/hadoop-ozone/dist/src/main/compose/ozonesecure-om-ha/docker-config#L53

      Attachments

        Issue Links

          is caused by

          Bug - A problem which impairs or prevents the functions of the product. HDDS-4704 Add permission check in OMDBCheckpointServlet

          • Major - Major loss of function.
          • Resolved
          is part of

          Bug - A problem which impairs or prevents the functions of the product. HDDS-5165 OM DB checkpoint servlet not accessible in a secure cluster

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #2245

          Activity

            People

              smeng Siyao Meng
              smeng Siyao Meng
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: