EdColeman opened a new pull request, #3118:
URL: https://github.com/apache/accumulo/pull/3118
Adds an option to print the ZooKeeper ACLs for Accumulo nodes that can be
run pre-upgrade with only ZooKeeper running to check that the upgrade check
will pass. This is to help users resolve #3108 by providing tool they can use
to check ZooKeeper node permissions before starting the upgrade process. This
version only provides the info and does not enforce any security posture - that
could be added as a follow-on if desired.
The command format is:
```
accumulo zoo-info-viewer --print-acls
```
The output lists if Accumulo has necessary access, if other have modify
access and is others can read. The output looks like:
```
-----------------------------------------------
Report Time: 2022-12-12T16:00:48.815718Z
-----------------------------------------------
ZooKeeper acls for instance ID: 6061fb02-0863-47d9-bf03-21b668520a92
CAN_ACCESS:ANY_CLOSED:ANY_READ
/accumulo/6061fb02-0863-47d9-bf03-21b668520a92 cdrwa:accumulo, r:anyone
CAN_ACCESS:ANY_CLOSED:ANY_READ
/accumulo/6061fb02-0863-47d9-bf03-21b668520a92/bulk_failed_copyq
cdrwa:accumulo, r:anyone
CAN_ACCESS:ANY_CLOSED:ANY_READ
/accumulo/6061fb02-0863-47d9-bf03-21b668520a92/bulk_failed_copyq/locks
cdrwa:accumulo, r:anyone
CAN_ACCESS:ANY_CLOSED:ANY_READ
/accumulo/6061fb02-0863-47d9-bf03-21b668520a92/compactors cdrwa:accumulo,
r:anyone
CAN_ACCESS:ANY_CLOSED:PRIVATE
/accumulo/6061fb02-0863-47d9-bf03-21b668520a92/config cdrwa:accumulo
...
CAN_ACCESS:ANY_CLOSED:ANY_READ
/accumulo/6061fb02-0863-47d9-bf03-21b668520a92/wals/localhost:9997[1000268a4920004]/c781ebab-2ba7-4ef4-88ea-64697479dc6e
cdrwa:accumulo, r:anyone
CAN_ACCESS:ANY_UPDATE:ANY_READ /accumulo/instances cdrwa:anyone
CAN_ACCESS:ANY_CLOSED:ANY_READ /accumulo/instances/uno cdrwa:accumulo,
r:anyone
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
