HBase 2.6 has been released a while ago and it includes several advancements over the currently supported 2.4 version.
Value
The security model has been consolidated and it allows us implement an authorizer based on the Open Policy Agent. This would align HBase with Trino, HDFS and other products already supporting OPA.
Dependencies
New product image
HBase operator tools library needs to be tested and eventually updated.
Phoenix compatibility needs to be tested and eventually fixed
OMID compatibility needs to be tested and eventually fixed
The new OPA based access controller needs to be tested
The HBase operator needs to produce new configuration files for log4j2.
### Tasks
- [x] New product image @razvan
- [x] The new OPA based access controller needs to be tested with regorules @adwk67
- [x] HBase operator tools library needs to be tested and eventually updated.
- [ ] https://github.com/stackabletech/issues/issues/589
- [ ] https://github.com/stackabletech/issues/issues/593
- [x] The HBase operator needs to produce new configuration files for log4j2.
- [x] Operator documentation that showcases the OPA authorizer @adwk67
- [x] Integration test for the OPA authorizer @adwk67
- [ ] Vulnerability management: diff with previous supported version and potentially handle low-hanging (easy) CVEs.
- [ ] https://github.com/stackabletech/hbase-operator/issues/488
- [ ] https://github.com/stackabletech/issues/issues/597
- [ ] Review and update any necessary patches
Description
HBase 2.6 has been released a while ago and it includes several advancements over the currently supported 2.4 version.
Value
The security model has been consolidated and it allows us implement an authorizer based on the Open Policy Agent. This would align HBase with Trino, HDFS and other products already supporting OPA.
Dependencies
Related repos and PRs
Integration tests
:green_circle: OpenShift: https://ci.stackable.tech/view/06%20Replicated/job/hbase-operator-it-replicated/14/ :green_circle: All Tests: https://ci.stackable.tech/view/06%20Replicated/job/hbase-operator-it-replicated/12/
:warning: The failed tests were successful when executed individually.
(Information Security) Risk Assessment
Accessibility Assessment
Quality
- There are unit tests, integration tests.
- The hdfs-hbase demo is using authorization to access the data.
## Release Notes