(hbase) branch branch-2.5 updated: HBASE-29947 Improve CopyTable command usage to execute in secure clusters (#7978)

[zh...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

Apache9 pushed a commit to branch branch-2.5
in repository https://gitbox.apache.org/repos/asf/hbase.git


The following commit(s) were added to refs/heads/branch-2.5 by this push:
     new cc1ed6dbf1e HBASE-29947 Improve CopyTable command usage to execute in secure clusters (#7978)
cc1ed6dbf1e is described below

commit cc1ed6dbf1e744578ce81a8546017cbd5914c8a0
Author: Sreenivasulu <sr...@gmail.com>
AuthorDate: Thu Jun 4 13:13:46 2026 +0530

    HBASE-29947 Improve CopyTable command usage to execute in secure clusters (#7978)
    
    Signed-off-by: Nihal Jain <ni...@apache.org>
    Signed-off-by: Pankaj Kumar <pa...@apache.org>
    Reviewed-by: Vaibhav Joshi <vj...@cloudera.com>
    (cherry picked from commit 68039a365a631092bed01f278d0231a3e2cab6e7)
---
 .../apache/hadoop/hbase/mapreduce/CopyTable.java   | 32 ++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/hbase-mapreduce/src/main/java/org/apache/hadoop/hbase/mapreduce/CopyTable.java b/hbase-mapreduce/src/main/java/org/apache/hadoop/hbase/mapreduce/CopyTable.java
index 8c8fbfb6e74..6ef1a842bab 100644
--- a/hbase-mapreduce/src/main/java/org/apache/hadoop/hbase/mapreduce/CopyTable.java
+++ b/hbase-mapreduce/src/main/java/org/apache/hadoop/hbase/mapreduce/CopyTable.java
@@ -233,6 +233,38 @@ public class CopyTable extends Configured implements Tool {
     System.err.println(" To copy data from 'sourceTableSnapshot' and bulk load to 'destTable': ");
     System.err.println(" $ hbase org.apache.hadoop.hbase.mapreduce.CopyTable "
       + "--new.name=destTable --snapshot --bulkload sourceTableSnapshot");
+    System.err.println();
+    System.err.println(
+      " To copy the data of 'TestTable' from the secured local cluster to a non-secured peer"
+        + " cluster (cluster-b)");
+    System.err.println(" $ hbase org.apache.hadoop.hbase.mapreduce.CopyTable "
+      + "-Dhbase.mapred.output.hbase.security.authentication=simple "
+      + "--peer.adr=cluster-b-1.example.com,cluster-b-2.example.com,cluster-b-3.example.com:"
+      + "2181:/cluster-b" + " TestTable");
+    System.err.println();
+    System.err.println(
+      " To copy the data of 'TestTable' from the local secured cluster to a peer secured cluster "
+        + "in a different Kerberos realm.");
+    System.err.println(" Assume cluster-b uses a different Kerberos principal "
+      + "(cluster-b/_HOST@EXAMPLE.COM) for its master and regionserver.");
+    System.err.println(" $ hbase org.apache.hadoop.hbase.mapreduce.CopyTable "
+      + "-Dhbase.mapred.output.hbase.regionserver.kerberos.principal="
+      + "cluster-b/_HOST@EXAMPLE.COM "
+      + "-Dhbase.mapred.output.hbase.master.kerberos.principal=cluster-b/_HOST@EXAMPLE.COM "
+      + "--peer.adr=cluster-b-1.example.com,cluster-b-2.example.com,cluster-b-3.example.com:"
+      + "2181:/cluster-b" + " TestTable");
+    System.err.println();
+    System.err.println(
+      " To copy the data of 'TestTable' from a non-secured local cluster to a secured peer cluster"
+        + " (cluster-b)");
+    System.err.println(" $ hbase org.apache.hadoop.hbase.mapreduce.CopyTable "
+      + "-Dhbase.mapred.output.hbase.security.authentication=kerberos "
+      + "-Dhbase.mapred.output.hbase.regionserver.kerberos.principal="
+      + "cluster-b/_HOST@EXAMPLE.COM "
+      + "-Dhbase.mapred.output.hbase.master.kerberos.principal=cluster-b/_HOST@EXAMPLE.COM "
+      + "--peer.adr=cluster-b-1.example.com,cluster-b-2.example.com,cluster-b-3.example.com:"
+      + "2181:/cluster-b" + " TestTable");
+    System.err.println();
     System.err.println("For performance consider the following general option:\n"
       + "  It is recommended that you set the following to >=100. A higher value uses more memory but\n"
       + "  decreases the round trip time to the server and may increase performance.\n"