ZooKeeper ACLs Best Practices: Oozie
You must follow the best practices for tightening the ZooKeeper ACLs or permissions for Oozie when provisioning a secure cluster.
-
ZooKeeper Usage:
-
Used to coordinate multiple Oozie servers.
-
-
Default ACLs:
In a secure cluster, Oozie restricts the access to Oozie Znodes to the oozie principals only using Kerberos backed ACLs.-
/oozie- node that stores oozie server information in HA mode
Default ACLs:-
/oozie-world:anyone:cdrwa
-
-
Security Best Practice ACLs/Permissions and Required Steps:
-
Set
oozie.zookeeper.securetosecure
-