Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-14234

Limit WebHDFS to specifc user, host, directory triples

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Resolved
    • Trivial
    • Resolution: Fixed
    • None
    • 3.3.0
    • webhdfs
    • None
    • Reviewed

    Description

      For those who have multiple network zones, it is useful to prevent certain zones from downloading data from WebHDFS while still allowing uploads. This can enable functionality of HDFS as a dropbox for data - data goes in but can not be pulled back out. (Motivation further presented in StrangeLoop 2018 Of Data Dropboxes and Data Gloveboxes).

      Ideally, one could limit the datanodes from returning data via an OPEN but still allow things such as GETFILECHECKSUM and CREATE.

      Attachments

        Issue Links

        duplicates

        Bug - A problem which impairs or prevents the functions of the product. HDFS-3807 hadoop.http.filter.initializers not applied to webhdfs urls

        • Major - Major loss of function.
        • Resolved
        is related to

        Bug - A problem which impairs or prevents the functions of the product. HDFS-15320 StringIndexOutOfBoundsException in HostRestrictingAuthorizationFilter

        • Major - Major loss of function.
        • Resolved

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            clayb Clay B.
            clayb Clay B.
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment