ZooKeeper ACLs Best Practices: Storm
You must follow the best practices for tightening the ZooKeeper ACLs or permissions for Storm when provisioning a secure cluster.
-
ZooKeeper Usage:
-
/storm
- All data for storm metadata, Storm's root znode
-
-
Default ACLs:
-
/storm
-world:anyone:cr
-
/storm
-sasl:storm-PRD1:cdrwa
Where
-PRD1
comes from StormClient Principal and Ambari creates the principal withstorm-<cluster_name>
.
-
-
Security Best Practice ACLs/Permissions and Required Steps:
-
/storm
-world:anyone:cr
-
/storm
-sasl:storm-PRD1:cdrwa
Where
-PRD1
comes from StormClient Principal and Ambari creates the principal withstorm-<cluster_name>
.
-