nickwallen commented on a change in pull request #1549: METRON-2305: provide
required hbase acl to metron user before altering enrichment table and adding
coprocessor.
URL: https://github.com/apache/metron/pull/1549#discussion_r340647115
##########
File path:
metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/package/scripts/enrichment_commands.py
##########
@@ -268,7 +268,7 @@ def set_hbase_acls(self):
self.__params.hbase_principal_name,
execute_user=self.__params.hbase_user)
- cmd = "echo \"grant '{0}', 'RW', '{1}'\" | hbase shell -n"
+ cmd = "echo \"grant '{0}', 'CRW', '{1}'\" | hbase shell -n"
Review comment:
Ah, ok. I was curious why this worked before without 'C'. But it really
didn't work before. This bug here is "Unable to Add Coprocessor with
Kerberos".
This has only previously worked when the coprocessor is added first (without
Kerberos), then kerberize, and after kerberization the coprocessor is already
there, so we don't hit the bug.
The two fixes in your PR are to:
1. Allow 'C' for 'metron' users
2. Enable ACLs before loading coprocessor.
This makes sense to me now. Thanks
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
With regards,
Apache Git Services
