Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-24121

[Authorization] ServiceAuthorizationManager isn't dynamically updatable. And it should be.

    XMLWordPrintableJSON

Details

    • Reviewed
    • Hide
      Master & RegionService now support refresh policy authorization defined in hbase-policy.xml without restarting service. To refresh policy, please execute hbase shell command: update_config or update_config_all after policy file updated and synced on all nodes.
      Show
      Master & RegionService now support refresh policy authorization defined in hbase-policy.xml without restarting service. To refresh policy, please execute hbase shell command: update_config or update_config_all after policy file updated and synced on all nodes.

    Description

      Some more background information.

      ServiceAuthorizationManager is responsible for the Services access rights defined in hbase-policy.xml which locates under $hbase_home/conf directory.

      Currently, since it doesn't support update dynamically, we need to restart master/regionservers to make configurations take effect. It is an expensive and low efficient admin operation.

      HDFS has the refreshPolicy to do that, HBase also has update_config command, we can make use of that.

      Attachments

        Issue Links

          Activity

            People

              reidchan Reid Chan
              reidchan Reid Chan
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: