Anmol Asrani created HADOOP-19940:
-------------------------------------
Summary: ABFS: Set permissions should be no-op for RBAC
Key: HADOOP-19940
URL: https://issues.apache.org/jira/browse/HADOOP-19940
Project: Hadoop Common
Issue Type: Sub-task
Components: fs/azure
Affects Versions: 3.5.0
Reporter: Anmol Asrani
Fix For: 3.5.1
*Proposal from ABFS driver side: -*
Introduce an optional ABFS configuration, for example:
*fs.azure.rbac.only=true*
When this configuration is enabled for {*}HNS-enabled accounts{*}, ABFS will
check the flag in AzureBlobFileSystem#setPermission() before invoking the
backend ACL update operation. If the account is HNS-enabled and
fs.azure.rbac.only=true, setPermission() will be treated as a no-op and the
driver will return success without issuing a SetAccessControl request to ADLS
Gen2.
This enables customers who have chosen an *RBAC-only authorization model* to
run Spark and Hadoop workloads without requiring ACL-management permissions,
while still retaining RBAC-based access to data operations.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
