-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Added Ranger and Resource group documentation for kill_query
#27055
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
Reviewer's guide (collapsed on small PRs)Reviewer's GuideThis PR fills in missing documentation for the system.runtime.kill_query() procedure by adding guidance in both the Resource Group and Ranger Access Control sections to ensure users properly configure permissions and query type for direct execution of kill_query. Entity relationship diagram for Ranger policy configuration for kill_queryerDiagram
USER ||--o{ POLICY : has
POLICY {
string schema
string database
string procedure
string permission
}
POLICY ||--o{ PROCEDURE : applies_to
PROCEDURE {
string name
}
USER {
string user_id
}
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| `CREATE`, `ALTER`, and `DROP` statements for schemas, tables, views, and | ||
| materialized views, as well as statements that manage prepared statements, | ||
| privileges, sessions, and transactions. | ||
| privileges, sessions, and transactions. Also when external clients need the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| privileges, sessions, and transactions. Also when external clients need the | |
| privileges, sessions, and transactions. When external clients need access to the |
| materialized views, as well as statements that manage prepared statements, | ||
| privileges, sessions, and transactions. | ||
| privileges, sessions, and transactions. Also when external clients need the | ||
| `system.runtime.kill_query()` procedure to kill queries, this `queryType` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| `system.runtime.kill_query()` procedure to kill queries, this `queryType` | |
| `system.runtime.kill_query()` procedure to stop running queries, this `queryType` |
| privileges, sessions, and transactions. | ||
| privileges, sessions, and transactions. Also when external clients need the | ||
| `system.runtime.kill_query()` procedure to kill queries, this `queryType` | ||
| should be used to make sure the `kill_query()` is executed directly and |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| should be used to make sure the `kill_query()` is executed directly and | |
| must be used to make sure the `kill_query()` is executed directly and |
| execute any query. | ||
| * To allow this, create a policy in Apache Ranger for a `trinouser` resource | ||
| with value `{USER}` and with the `impersonate` permission for user `{USER}`. | ||
| * External clients might use the `system.runtime.kill_query()` procedure to |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| * External clients might use the `system.runtime.kill_query()` procedure to | |
| * External clients can use the `system.runtime.kill_query()` procedure to |
| * To allow this, create a policy in Apache Ranger for a `trinouser` resource | ||
| with value `{USER}` and with the `impersonate` permission for user `{USER}`. | ||
| * External clients might use the `system.runtime.kill_query()` procedure to | ||
| kill running queries by id. Add a policy with Schema `system`, Database |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| kill running queries by id. Add a policy with Schema `system`, Database | |
| kill running queries. Add a policy with Schema `system`, Database |
| privileges, sessions, and transactions. Also when external clients need the | ||
| `system.runtime.kill_query()` procedure to kill queries, this `queryType` | ||
| should be used to make sure the `kill_query()` is executed directly and | ||
| isn't queued to wait for the initial query to finish. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Did you verify this behavior with testing it manually?
Description
Added some missing documentation about the
system.runtime.kill_query()procedure in Ranger and Resource group sections.Release notes
( X ) This is not user-visible or is docs only, and no release notes are required.
( ) Release notes are required. Please propose a release note for me.
( ) Release notes are required, with the following suggested text:
Summary by Sourcery
Add documentation about the system.runtime.kill_query() procedure in the resource groups guide and the Ranger access control guide
Documentation: