-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46614/
-----------------------------------------------------------

(Updated April 25, 2016, 5:32 p.m.)


Review request for Ambari, Jonathan Hurley, Nate Cole, and Velmurugan Periasamy.


Changes
-------

Fixed unit test, fixed comment


Bugs: AMBARI-16084
    https://issues.apache.org/jira/browse/AMBARI-16084


Repository: ambari


Description
-------

So here's where we are:

- https://reviews.apache.org/r/45890/diff/2#index_header removed hard-coded 
python code which was trying to figure out which coprocessor to use. With these 
values gone, it's now up to Ambari to set the _right_ value in the 
configurations.

- However, after removing the above code, we never change the ranger 
configurations to reflect the proper value

- To fix this, we need to fix the values on Ambari upgrade. When upgrading 
Ambari from 2.0, we'll need to do the following:
-- If Ranger is disabled; do nothing
-- If Ranger is enabled and the cluster's current stack is HDP 2.2, then set 
the master/region coprocessors to
{code}
hbase_coprocessor_master_classes = 
"com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor"
hbase_coprocessor_regionserver_classes = 
"com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor"
hbase_coprocessor_region_classes = 
"org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor"
{code}
-- If Ranger is enabled and the cluster's current stack is HDP 2.3, then set 
the master/region coprocessors to
{code}
hbase_coprocessor_master_classes = 
"org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor "
hbase_coprocessor_regionserver_classes = 
"org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor"
hbase_coprocessor_region_classes = 
"org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor"
{code}

Now HDP stack upgrades will work since we look for 
{{XaSecureAuthorizationCoprocessor}} and change it to 
{{RangerAuthorizationCoprocessor}} as needed.


Diffs (updated)
-----

  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
 b7665ce 
  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog220.java
 0738d70 
  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog222.java
 31a3ce5 
  
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog222Test.java
 4302349 

Diff: https://reviews.apache.org/r/46614/diff/


Testing (updated)
-------

ran unit tests

Checked ambari upgrade on live cluster. Could not perform EU because Hbase 
Regionserver started to fail after enabling Ranger HBASE Plugin


Thanks,

Dmitro Lisnichenko

Reply via email to