Scott C Gray created AMBARI-14269:
-------------------------------------
Summary: Ambari views to utilize only open REST interfaces
Key: AMBARI-14269
URL: https://issues.apache.org/jira/browse/AMBARI-14269
Project: Ambari
Issue Type: Improvement
Components: ambari-views
Reporter: Scott C Gray
Currently Ambari supports a separation of duties between administration and
end-user activities by allowing separate instances of Ambari for each. As
Ambari views are implemented today, the instance of Ambari hosting the views
must, by necessity, run inside of the cluster as it access various components
via direct RPC calls and, thus, could accidentally allow malicious access to
services that were not intended for end users to access. In addition, in this
configuration, currently requires additional ports to be opened for access to
the second Ambari instance.
If all Ambari views were restricted to only accessing cluster resources through
open REST interfaces, then the "views instance" of Ambari could be isolated
outside of the cluster itself and access the cluster only through Knox
facilities.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
