Preparing Ozone for data ingestion
You must prepare the Ozone cluster for ingesting the data from the HDFS cluster.
Decide on the HDFS to Ozone mapping scheme.
Consider the example of mapping the HDFS
/userdirectory to an Ozone volume.
Create the volume
/useras an admin user.
> kinit as admin user and create the volume > ozone sh volume create ofs://<ozone.service.id>/user
Create an encrypted bucket to migrate a user's directory from the HDFS
The following example shows how you can create an encrypted bucket for a user
> kinit as admin user and create the bucket for john.doe > hadoop key create xxx_key > ozone sh bucket create -k xxx_key /user/john.doe (Optionally create a target dir inside the bucket if needed) > hdfs dfs -mkdir ofs://<ozone.service.id>/user/john.doe/target_dir
Provide permissions to the user to access the encrypted bucket.
Use Ranger to provide the required permissions.The following image shows the Ranger policy configured for the user