Contract between the server and service type plugins: the service type definition model, the provider SPI and the plugin descriptor. Depends on nothing but JSpecify and is versioned on its own (ApiVersion).

The Apache HBase service type in HBase's own terms: the global scope, namespaces, tables, column families and columns, with HBase's read, write, create and admin as access types. Lookups go through HBase's own client, on Hadoop's ...

The HDFS service type (M13-03), modelled on Apache Ranger's: paths with read, write and execute, looked up and tested with Hadoop's own (shaded) client over hdfs:// RPC, HA nameservices or webhdfs://, with simple or Kerberos ...

The Apache Hive service type, as Apache Ranger defines it: databases, tables, columns and UDFs, URLs, the HiveServer2 service and replication, with Hive's access types, column masking and table row filters. Lookups go through ...

Loads service type plugins: built-in ones from the classpath, external ones from the plugins directory, each in its own class loader

The Apache Kafka service type: topics, consumer groups, transactional IDs, the cluster, delegation tokens and users, with Kafka's own operations as access types, so policies read like Kafka ACLs. Lookups go through Kafka's AdminClient ...

The MySQL service type: databases, tables and columns with MySQL's own privileges, column masking and table row filters, looked up and tested through MariaDB Connector/J (LGPL), which speaks MySQL's protocol and is the driver ...

The Trino service type in Trino's own terms: catalogs, schemas, tables, columns, routines, session properties, users and system information, with row filters and column masks written as Trino SQL. Lookups go through Trino's JDBC ...

The Apache Hadoop YARN service type in YARN's own terms: queues, decided at every queue of their path as YARN's own queue ACLs are, applications by name within a queue, and the cluster's administration, with YARN's submit and ...

The ZooKeeper service type: znode paths with ZooKeeper's own permissions (read, write, create, delete, admin), looked up, browsed and tested with ZooKeeper's own client over an ensemble's connection string, with no, digest or Kerberos ...