...
Explore CDAP entities and integrate them with hueCloudrea Hue
Use hue Hue's interface to manage ACL for sentryApache Sentry
Checklist
- User stories documented (Rohit/BhooshanShenggu)
- User stories reviewed (Nitin)
- Design documented (Rohit/Bhooshan)documented
- Design reviewed (Andreas)reviewed
- Feature merged (Rohit/Bhooshan)
- Examples and guides (Rohit)
- Integration tests (Bhooshan)tests
- Documentation for feature (Rohit/Bhooshan)
- Blog post
User Stories
- As a CDAP systemadmin, I should be able to integrate with Apache Sentry for fine-grained role-based access controls of select CDAP operations easily configure CDAP as a plugin app in the Hue system
- As a CDAP admin, I should be able to easily configure Sentry to work with CDAP on different type of cluster explore all the entities of CDAP (ex: CDH, CM cluster etc). Namespaces, Streams, Programs etc.) in Cloudrea Hue management interface.
- As a CDAP admin, I should be able to create/update/delete roles in Apache Sentry
- As a CDAP admin, I should be able to add users/groups to roles in Apache Sentry
- As a CDAP admin, I should be able to turn authorization on/off easily for entire CDAP instanceperform all the ACL management operations provided by Apache Sentry also in Cloudrea Hue interface.
- As a CDAP system, I should be able to authorize the following requests
- Namespace create/update/delete
- Application deployment
- Program start/stop
- Stream read/write (Not Implemented in 3.4)
These operations are a subset that represents the various 'kinds' of operations allowed in CDAP
...