stackabletech / stackabletech/hbase-operator
Enable Authorization for HBase
还没有人认领这个 Issue。
- 主要语言
- Rust
- 星标
- 21
- 派生
- 6
- 平均合并
- 1 天 19 小时
- 30 天内合并 PR
- 9
描述
We currently do not support authorizing requests against HBase.
This epic is intended to track the subtasks that we need to accomplish in order to add this functionality.
For the purpose of this epic I think we can ignore authentication, which should be covered under a separate issue.
This needs serious refining, below I have added a few first thoughts around this issue that hopefully can serve as pointers during refinement:
- investigate if we can reuse the Ranger authorizer with OPA (I have some code available for this)
- adapt operator to allow enabling secure mode
- integrate with opa operator
- create opa ruleset to authorize based on data sent by authorizer
- define crds to specify access control lists for hdfs in k8s and cretae functionality for operator to translate this for opa
- much more
贡献指南
这个仓库没有索引到贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
调研方向
首先将此 epic 细化为围绕 HBase operator、secure mode、OPA integration、authorization rules 以及用于 HDFS access control 的 CRDs 的具体子任务。该 issue 未列出任何文件或测试,完成标准也尚未定义;细化工作必须确定入口点、验收测试,以及 authorization support 包含哪些内容。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- kubernetes, rust
- 领域
- authorization, devops, security
- Issue 类型
- 功能
- 难度
- 5/5
- 预计耗时
- 一周以上
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 20/100