Member since
01-30-2020
6
Posts
0
Kudos Received
0
Solutions
01-26-2021
04:02 AM
Hello , I administer a small production cluster (2NN, 7DN). I want to perform a cluster maintenance (OS & Security updates) which will require for all nodes to be rebooted. From what i read impala catalog and statestore services can be migrated to different nodes with no issues. What about HiveServer, metastore and our databases (mariadb) (single host)? Can their hosts be rebooted without overal cluster downtime or should we enable HA for them? Ideally we want to avoid downtime.
... View more
Labels:
- Labels:
-
Apache Hive
-
Apache Impala
11-04-2020
03:03 AM
Hello Everyone, Do HDFS ACLs apply on impala queries? If, for example, I want to give read permissions on specific directories in HDFS to a specific user and I modify the appropriate ACLs using "hdfs dfs setfacl" on the mentioned directories, will the user have only SELECT permissions when querying the files? I want to avoid using Kerberos auth and Sentry service.
... View more
Labels:
- Labels:
-
Apache Impala
-
HDFS
09-23-2020
01:31 AM
Thank you for your reply Tim. Just to clarify, security-wise, are we better off with our current configuration (default), with sentry service disabled, or with sentry enabled in testing mode? You mentioned that sentry in testing mode does not authenticate the clients, but in the documentation it is mentioned that testing mode uses weaker authentication mechanisms. We need this in order to prevent our analysts from doing accidental writes, drops, etc. on the data. Our cluster is in a secure isolated environment.
... View more
09-22-2020
07:47 AM
Hello Everyone,
Is there a way to permit SELECT only impala queries in HUE without enabling and configuring Sentry service? (maybe in OS level)
The problem with enabling Sentry is that I have to first enable Kerberos and before that renaming some of my nodes.
There is the option to enable Sentry testing mode but Cloudera does not recommend that in production environments.
... View more
Labels: