Apache ZooKeeper ACLs
Also available as:
PDF

ZooKeeper ACLs Best Practices: Slider

Best practices for tightening the ZooKeeper ACLs/permissions for Slider when provisioning a secure cluster.

  • ZooKeeper Usage:
    • /services/slider/users/username/applicationName - A node created by slider for use by an application if the “create.default.zookeeper.node” property is set to “true” in the Slider appConfig file. It is intended for use by the application so ACL modification would be application specific.

  • Default ACLs:
    • /services/slider/users/username/applicationName - world:anyone:r, world:user:cdrwa

  • Security Best Practice ACLs/Permissions and Required Steps:
    • The application node is created with the above ACLs during Slider application launch, so no further steps are required.