DTStack / Taier

Taier is a big data development platform for submission, scheduling, operation and maintenance, and indicator information display
https://dtstack.github.io/Taier/
Apache License 2.0
1.32k stars 330 forks source link

[Feature][taier-data-develop] hiveserver&sparkThriftserver链接方式增加权限隔离 #1146

Open feelshana opened 9 months ago

feelshana commented 9 months ago

Search before asking

Description

目前的hive/spark-thriftserver数据源非krb方式,通过配置的数据源进行任务提交存在权限问题: 1.配置用户时,数据源被不同用户使用时候变成同一用户(配置用户), 2.如果不配置用户,会变成匿名用户,没有权限 建议通过配置用户进行链接测试,提交任务时通过hive代理用户来进行权限隔离;hive.server2.proxy.user对于hiveServer2与sparkThriftserver2都适用

Use case

client的数据源url配置中增加hive.server2.proxy.use为当前登录用户

Related issues

No response

Are you willing to submit a PR?

Code of Conduct

vainhope commented 5 months ago

taier用户需要和ldap信息打通 来实现proxy用户隔离