OpenTSDB - security capabiities

[karan alang]

Hi All - I'm looking for information on security capabilities in OpenTSDB (eg. restricting access to OpenTSDB data based on
specific users/user-groups etc on HDP 2.4 i.e. hortonworks)

Is there documentation around that ? Pls. share.

thanks !

[karan alang]

Hi - any ideas on this ?
Pls let me know.

thanks !

[Jonathan Creasy]

There is authentication plugin support in 2.4, the put branch, and a sample authentication plugin under github.com/inst-tech. It is not complete but shows what could be done.

For the most part, if you can reach OpenTSDB you have full access. You could use TSD instances in read-only, read-writr, and write-only modes and control access to those nodes.

[karan alang]

Hi Jonathan,

Need some clarification on this ..

I'm using opentsdb-2.2.1, so i assume i'll be able to use this plugin for authentication.
I've downloaded the zip file from -> github.com/inst-tech

Do i need to run this command next ?

I guess ill need to install gradle for this (am not too familiar with this) ? 

gradle clean fatJar runFatJar

What are the Next steps for configuring this for authentication ?

regds,

Karan Alang

[Jonathan Creasy]

I was going to say that I thought it was only in 2.3, but it won't actually be there until 2.4.

https://github.com/OpenTSDB/opentsdb/pull/899

Doing "gradle clean fatJar" will give you a jar, you can then put that in the OpenTSDB plugins directory.

It's not a working plugin, I mean, it works, but it just stores the credentials in memory. It doesn't really work for production use. It is intended as an example of to do authentication with the Authentication Plugin interface.

https://github.com/inst-tech/opentsdb-plugins/blob/master/src/main/java/io/tsdb/opentsdb/authentication/SimpleAuthenticationPlugin.java

-Jonathan

[karan alang]

Hello -
is it possible for me to have multiple instances in OpenTSDB - each instance pointing to a separate Hbase tables for storing timeseries data.

eg. Install 1 - will wtite data to table - tsdb

Install 2 - will write to table - tsdb2 and so on.

What all files do i need to make changes to make this work ?

Essentially, the idea is segregate the time series data, based on functionality.

Pls let me know your inputs.

thanks!

On Tue, Dec 27, 2016 at 3:57 PM, Jonathan Creasy <jona...@ghostlab.net> wrote:

[ManOLamancha]

On Thursday, January 12, 2017 at 11:34:07 AM UTC-8, karan alang wrote:

Hello -
is it possible for me to have multiple instances in OpenTSDB - each instance pointing to a separate Hbase tables for storing timeseries data.

eg. Install 1 - will wtite data to table - tsdb

Install 2 - will write to table - tsdb2 and so on.

What all files do i need to make changes to make this work ?

Essentially, the idea is segregate the time series data, based on functionality.

Sure, you just have to setup multiple "opentsdb.config" files then run the TSD with the --config flag pointing to the proper config.