Apache ZooKeeper ACLs
Also available as:
PDF

ZooKeeper ACLs Best Practices: Storm

You must follow the best practices for tightening the ZooKeeper ACLs or permissions for Storm when provisioning a secure cluster.

  • ZooKeeper Usage:
    • /storm - All data for storm metadata, Storm's root znode

  • Default ACLs:
    • /storm - world:anyone:cr

    • /storm - sasl:storm-PRD1:cdrwa

      Where -PRD1 comes from StormClient Principal and Ambari creates the principal with storm-<cluster_name> .

  • Security Best Practice ACLs/Permissions and Required Steps:
    • /storm - world:anyone:cr

    • /storm - sasl:storm-PRD1:cdrwa

      Where -PRD1 comes from StormClient Principal and Ambari creates the principal with storm-<cluster_name> .

    -->