[SLIDER-89] Uber JIRA: secure slider clusters

• Type: Umbrella
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: Slider 0.30
• Fix Version/s: Slider 2.0.0
• Component/s: appmaster, core
• Labels: security
• Sprint: slider June 2, Slider July #1, Slider August #1, Slider August #2, Slider September #1, Slider October #1, Slider October #2
• Assignee: Jonathan Maron
• Reporter: Steve Loughran
• Created: 20/May/14 11:53
• Updated: 09/Nov/14 18:31

Description

JIRA to cover everything needed for secure slider clusters

1. web UIs negotiated
2. REST APIs
3. YARN ticket expiry handled
4. HDFS token expiry handled
5. registry secure against impersonation and unprivileged access
6. security info published in registry
7. agent secure in communications with AM
8. registered binding info parseable by Knox for locked down clusters

Issue Links

• contains: SLIDER-131 enable AM one and two-way SSL and test/enable agent secure comm
• contains: SLIDER-304 Handle HDFS token expiry in the AM

Sub-Tasks

• Test and document securing Accumulo on Slider: Open