ZooKeeper ACLs Best Practices: Storm
You must follow the best practices for tightening the ZooKeeper ACLs or permissions for Storm when provisioning a secure cluster.
-
ZooKeeper Usage:
-
/storm- All data for storm metadata, Storm's root znode
-
-
Default ACLs:
-
/storm-world:anyone:cr -
/storm-sasl:storm-PRD1:cdrwaWhere
-PRD1comes from StormClient Principal and Ambari creates the principal withstorm-<cluster_name>.
-
-
Security Best Practice ACLs/Permissions and Required Steps:
-
/storm-world:anyone:cr -
/storm-sasl:storm-PRD1:cdrwaWhere
-PRD1comes from StormClient Principal and Ambari creates the principal withstorm-<cluster_name>.
-

