Hao Hao has posted comments on this change. ( http://gerrit.cloudera.org:8080/15897 )
Change subject: docs: add Ranger integration ...................................................................... Patch Set 2: (1 comment) http://gerrit.cloudera.org:8080/#/c/15897/2/docs/security.adoc File docs/security.adoc: http://gerrit.cloudera.org:8080/#/c/15897/2/docs/security.adoc@506 PS2, Line 506: [[privilege-caching]] : === Kudu Master Caching for Sentry : : To avoid overwhelming Sentry with requests to fetch user privileges, the Kudu : master can be configured to cache user privileges. A by-product of this caching : is that when privileges are changed in Sentry, they may not be reflected in : Kudu for a configurable amount of time, defined by the following Kudu master : configurations: : : `--sentry_privileges_cache_ttl_factor * --authz_token_validity_interval_secs` : : The default value is fifty minutes. If privilege updates need to be reflected : in Kudu sooner than this, the Kudu CLI tool can be used to invalidate the : cached privileges to force Kudu to fetch new ones from Sentry: : : [source,bash] : ---- : kudu master authz_cache reset <master-addresses> > We need these docs to land in master to exist going forward. We can and sho Ack -- To view, visit http://gerrit.cloudera.org:8080/15897 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: Iad9476f18267c1e14a73f893fd812674c955eee2 Gerrit-Change-Number: 15897 Gerrit-PatchSet: 2 Gerrit-Owner: Hao Hao <hao....@cloudera.com> Gerrit-Reviewer: Alexey Serbin <aser...@cloudera.com> Gerrit-Reviewer: Andrew Wong <aw...@cloudera.com> Gerrit-Reviewer: Attila Bukor <abu...@apache.org> Gerrit-Reviewer: Grant Henke <granthe...@apache.org> Gerrit-Reviewer: Hao Hao <hao....@cloudera.com> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Comment-Date: Wed, 13 May 2020 18:21:24 +0000 Gerrit-HasComments: Yes
