Hi John, Since this is a community driven project I would like to open it up to the community to define these features and how we feel they should be implemented. Your post resulted in two open Jiras: METRON-105 and METRON-106. I want to have a larger discussion on both of these topics before I weigh in with what my ideas for how we want this implemented.
I will open up two discuss threads to discuss these Jiras. One thread will be for multi tenancy and one will be for security of data in transit and data at rest. Feel free to contribute to both with your ideas. Thanks for prompting the discussion, James On 4/5/16, 1:32 PM, "[email protected] on behalf of John" <[email protected] on behalf of [email protected]> wrote: >Hey James, > >Thanks for the quick answer! On the encryption question -- do you guys >imagine there being any application-level encryption that we should keep in >mind while coding? Or would it be transparent to the application solutions >(ex. database/filesystem/disk-level encryption). > >And on the multitenancy part -- I just meant if I gave users access to >future-Metron, would I be able to limit their access to certain objects >(ex. NetID + IP Range) using ACL's or whatever within Metron? Or would I >spin up a hierarchy of Metron instances that mimic the required user >permission tree? > > >Thanks, >John > >On Tue, Apr 5, 2016 at 4:46 AM, James Sirota <[email protected]> >wrote: > >> Hi John, >> >> Encryption of data at rest is definitely on our radar. This is a >> fundamental feature of any enterprise deployment. What is your definition >> of multi tenancy? Having multiple instances of Metron run on the same >> cluster? A single instance of Metron processing data streams from multiple >> data centers? Or having Metron co-located with other Hadoop applications? >> >> Thanks, >> James >> >> >> >> On 4/4/16, 6:40 PM, "[email protected] on behalf of John" < >> [email protected] on behalf of [email protected]> wrote: >> >> >Hello Dev@Metron, >> > >> >I've been reading through the awesome wiki -- definitely a lot of good >> >stuff there! Had a couple of high-level questions around data protection >> >though... >> > >> >Is it on the radar for Metron to support Multitenancy? >> > >> >And/or is it on the radar for Metron to support data encryption at rest? >> > >> >I don't know if this plays into the picture -- but I see a chunk of the >> >underlying services are supported by Ranger (ex. HBase, Storm, Kafka, >> >etc.)... the rest are maybe supported by Shield (ex. Elasticsearch, >> Kibana). >> > >> > >> >Thanks! >> >John >>
