-
Notifications
You must be signed in to change notification settings - Fork 3.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
acl for zookeeper is added #2190
Conversation
Looks reasonable. Thanks for the patch! Can you add some basic testing in |
👍 Do you mind signing the CLA here? http://druid.io/community/cla.html |
@fjy just signed. |
@drcrallen Do you mean something like testHostName()? I'm confused because I can't see any tests for zkSessionTimeoutMs and enableCompression parameters. |
@drcrallen Same thoughts here. We have to create the framework so it is easy for contributors to add their UT. |
@genevien with just this, how is zookeeper server going to identify the connecting user to be able to enforce ACL ? |
@himanshug on my local environment I have configured zookeeper server according to https://cwiki.apache.org/confluence/display/ZOOKEEPER/Zookeeper+and+SASL and I have run druid process setting "-Djava.security.auth.login.config=/path/to/client/jaas/file.conf" |
@genevien thanks, can you also update https://github.com/druid-io/druid/blob/master/server/src/test/java/io/druid/curator/CuratorConfigTest.java to check that serde for acl attribute is working as expected. |
@genevien can you update the documentation to reflect this new setting? |
@himanshug @xvrl sure, I will do it after the weekends. |
With this patch you can enable ACL security for zookeeper. By default it will be disabled. In order to enable it you should add this line in your druid properties file:
druid.zk.service.acl=true