Pratyush Bhatt created HBASE-28421:
--------------------------------------
Summary: Add ofs (Ozone Filesystem) support for
acquireDelegationToken
Key: HBASE-28421
URL: https://issues.apache.org/jira/browse/HBASE-28421
Project: HBase
Issue Type: Improvement
Components: security
Reporter: Pratyush Bhatt
Currently acquireDelegationToken is hardcoded for checking swebhdfs, webhdfs
and hdfs(Refer below or
[here|[https://github.com/apache/hbase/blob/4f97ece9f5ab9288ea44f5842be55a4dbaa866e0/hbase-server/src/main/java/org/apache/hadoop/hbase/security/token/FsDelegationToken.java#L62-L84]]).
We should add support for Ozone also.
{code:java}
public void acquireDelegationToken(final FileSystem fs) throws IOException {
String tokenKind;
String scheme = fs.getUri().getScheme();
if (SWEBHDFS_SCHEME.equalsIgnoreCase(scheme)) {
tokenKind = SWEBHDFS_TOKEN_KIND.toString();
} else if (WEBHDFS_SCHEME.equalsIgnoreCase(scheme)) {
tokenKind = WEBHDFS_TOKEN_KIND.toString();
} else if (HDFS_URI_SCHEME.equalsIgnoreCase(scheme)) {
tokenKind = HDFS_DELEGATION_KIND.toString();
} else {
LOG.warn("Unknown FS URI scheme: " + scheme);
// Preserve default behavior
tokenKind = HDFS_DELEGATION_KIND.toString();
}
acquireDelegationToken(tokenKind, fs);
} {code}
This can impact jobs like BulkLoad on a secure environment.
Thanks [~bszabolcs] for the debug help!
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
