You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hbase.apache.org by "Pankaj Kumar (Jira)" <ji...@apache.org> on 2020/07/30 12:25:00 UTC

[jira] [Created] (HBASE-24800) Enhance ACL region initialization

Pankaj Kumar created HBASE-24800:
------------------------------------

             Summary: Enhance ACL region initialization
                 Key: HBASE-24800
                 URL: https://issues.apache.org/jira/browse/HBASE-24800
             Project: HBase
          Issue Type: Improvement
          Components: acl, MTTR
            Reporter: Pankaj Kumar
            Assignee: Pankaj Kumar


RegionServer persist ACL table entries into Zookeeper during ACL region open,

{code}
      private void initialize(RegionCoprocessorEnvironment e) throws IOException {
    final Region region = e.getRegion();
    Configuration conf = e.getConfiguration();
    Map<byte[], ListMultimap<String, UserPermission>> tables = PermissionStorage.loadAll(region);
    // For each table, write out the table's permissions to the respective
    // znode for that table.
    for (Map.Entry<byte[], ListMultimap<String, UserPermission>> t:
      tables.entrySet()) {
      byte[] entry = t.getKey();
      ListMultimap<String, UserPermission> perms = t.getValue();
      byte[] serialized = PermissionStorage.writePermissionsAsBytes(perms, conf);
      zkPermissionWatcher.writeToZookeeper(entry, serialized);
    }
    initialized = true;
  }
{code}

Currently RegionServer send 2 RPC (one to create the table path and another to set the data) for each table sequentially.
{code}
 try {
      ZKUtil.createWithParents(watcher, zkNode);
      ZKUtil.updateExistingNodeData(watcher, zkNode, permsData, -1);
    } catch (KeeperException e) {
      LOG.error("Failed updating permissions for entry '" +
          entryName + "'", e);
      watcher.abort("Failed writing node "+zkNode+" to zookeeper", e);
    }
{code}

If a cluster have huge number of tables then ACL region open will take time. Example, it took ~9 min to write 60k tables ACL into ZK. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)