stackabletech / stackabletech/hbase-operator
Enable Authorization for HBase
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 21
- Forks
- 6
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 9
Description
We currently do not support authorizing requests against HBase.
This epic is intended to track the subtasks that we need to accomplish in order to add this functionality.
For the purpose of this epic I think we can ignore authentication, which should be covered under a separate issue.
This needs serious refining, below I have added a few first thoughts around this issue that hopefully can serve as pointers during refinement:
- investigate if we can reuse the Ranger authorizer with OPA (I have some code available for this)
- adapt operator to allow enabling secure mode
- integrate with opa operator
- create opa ruleset to authorize based on data sent by authorizer
- define crds to specify access control lists for hdfs in k8s and cretae functionality for operator to translate this for opa
- much more
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by refining this epic into concrete subtasks around the HBase operator, secure mode, OPA integration, authorization rules, and CRDs for HDFS access control. The issue names no files or tests, and completion criteria are not yet defined; refinement must establish the entry points, acceptance tests, and what authorization support includes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, rust
- Domain
- authorization, devops, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100