Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How we can prevent users from enabling their tables HA ?

How we can prevent users from enabling their tables HA ?

Contributor

HBase tables are not highly available by default. To enable high availability, designate a table as HA during table creation using the HBase shell using the REGION_REPLICATION keyword.

As the following example creates a table named t1 that is replicated to one secondary replica: CREATE 't1', 'f1', {REGION_REPLICATION => 2} To replicate t1 to two secondary regions, set REGION_REPLICATION to 3: CREATE 't1', 'f1', {REGION_REPLICATION => 3}

How we can prevent users from enabling their tables HA ?

3 REPLIES 3

Re: How we can prevent users from enabling their tables HA ?

Super Collaborator

Is the following requirement from http://hbase.apache.org/book.html#appendix_acl_matrix enough for you ?

If not, can you let us know why table owner should not be given the permission ?

modifyTablesuperuser|global(A)|global(C)|NS(A)|NS(C)|TableOwner|table(A)|table(C)
Highlighted

Re: How we can prevent users from enabling their tables HA ?

Contributor

@Ted Yu Thank you . In this use case, there are 100s of users and tables and users create the table through applications. User's question is if there is an governance mechanism in this case ? What if some one enables replication on a big table and brings down the entire cluster ?

They would want to prevent users from enabling their tables HA?

Re: How we can prevent users from enabling their tables HA ?

Contributor

If user is allowed to CREATE/MODIFY table he(she) can do any configuration changes including replication. The only way to disable REGION_REPLICATION for regular user and make it available for superuser is to patch the existing hbase code or to open HBase JIRA and propose the elegant solution how to new security feature w/o making everything more complex.