Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable Authorization for HDFS #236

Open
soenkeliebau opened this issue Sep 8, 2022 · 0 comments
Open

Enable Authorization for HDFS #236

soenkeliebau opened this issue Sep 8, 2022 · 0 comments

Comments

@soenkeliebau
Copy link
Member

soenkeliebau commented Sep 8, 2022

We currently do not support authorizing requests against HDFS.

This epic is intended to track the subtasks that we need to accomplish in order to add this functionality.
For the purpose of this epic I think we can ignore authentication, which should be covered under a separate issue: #178

This needs serious refining, below I have added a few first thoughts around this issue that hopefully can serve as pointers during refinement:

  • investigate if we can reuse the Ranger authorizer with OPA (I have some code available for this)
  • adapt operator to allow enabling secure mode
  • integrate with opa operator
  • create opa ruleset to authorize based on data sent by authorizer
  • define crds to specify access control lists for hdfs in k8s and cretae functionality for operator to translate this for opa
  • much more
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant