Enable Authorization for HBase
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 20/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- kubernetes, rust
- Domain
- authorization, devops, security
Research direction
Start by refining this epic into concrete subtasks around the HBase operator, secure mode, OPA integration, authorization rules, and CRDs for HDFS access control. The issue names no files or tests, and completion criteria are not yet defined; refinement must establish the entry points, acceptance tests, and what authorization support includes.
Written by the indexing model from the issue text.
Description
We currently do not support authorizing requests against HBase.
This epic is intended to track the subtasks that we need to accomplish in order to add this functionality.
For the purpose of this epic I think we can ignore authentication, which should be covered under a separate issue.
This needs serious refining, below I have added a few first thoughts around this issue that hopefully can serve as pointers during refinement:
- investigate if we can reuse the Ranger authorizer with OPA (I have some code available for this)
- adapt operator to allow enabling secure mode
- integrate with opa operator
- create opa ruleset to authorize based on data sent by authorizer
- define crds to specify access control lists for hdfs in k8s and cretae functionality for operator to translate this for opa
- much more
- Dominant language
- Rust
- Stars
- 21
- Forks
- 6
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 9
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from stackabletech/hbase-operator
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
stackabletech/hbase-operator#632 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
stackabletech/hbase-operator#582 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
stackabletech/hbase-operator#583 ·
-
type/bug
Difficulty 4/5 3-5 days Newbie friendliness 30/100
stackabletech/hbase-operator#551 ·
-
customer-request refinement-needed
Difficulty 5/5 Over a week Newbie friendliness 25/100
stackabletech/hbase-operator#510 ·
All issues in stackabletech/hbase-operator
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Eynzof/Hermes-CN-Desktop#610 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
gitbutlerapp/gitbutler#15998 · 1 comment ·
-
bug triage:deciding
Difficulty 1/5 Under an hour Newbie friendliness 88/100
open-telemetry/otel-arrow#4132 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100