ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Scott C Gray (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-14269) Ambari views to utilize only open REST interfaces
Date Tue, 08 Dec 2015 16:03:10 GMT
Scott C Gray created AMBARI-14269:
-------------------------------------

             Summary: Ambari views to utilize only open REST interfaces 
                 Key: AMBARI-14269
                 URL: https://issues.apache.org/jira/browse/AMBARI-14269
             Project: Ambari
          Issue Type: Improvement
          Components: ambari-views
            Reporter: Scott C Gray


Currently Ambari supports a separation of duties between administration and end-user activities
by allowing separate instances of Ambari for each.  As Ambari views are implemented today,
the instance of Ambari hosting the views must, by necessity, run inside of the cluster as
it access various components via direct RPC calls and, thus, could accidentally allow malicious
access to services that were not intended for end users to access.  In addition, in this configuration,
currently requires additional ports to be opened for access to the second Ambari instance.

If all Ambari views were restricted to only accessing cluster resources through open REST
interfaces, then the "views instance" of Ambari could be isolated outside of the cluster itself
and access the cluster only through Knox facilities.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message