/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

module.exports = {
  "Artifacts": {
    "artifact_name": "kerberos_descriptor",
    "stack_name": "HDP",
    "stack_version": "2.2"
  },
  "artifact_data": {
    "properties": {
      "realm": "${cluster-env/kerberos_domain}",
      "keytab_dir": "/etc/security/keytabs"
    },
    "identities": [
      {
        "principal": {
          "value": "HTTP/_HOST@${realm}",
          "configuration": null
        },
        "name": "spnego",
        "keytab": {
          "file": "${keytab_dir}/spnego.service.keytab",
          "owner": {
            "name": "root",
            "access": "r"
          },
          "configuration": null,
          "group": {
            "name": "${hadoop-env/user_group}",
            "access": "r"
          }
        }
      },
      {
        "principal": {
          "value": "hdfs@${realm}",
          "configuration": "cluster-env/hdfs_principal_name"
        },
        "name": "hdfs",
        "keytab": {
          "file": "${keytab_dir}/hdfs.headless.keytab",
          "owner": {
            "name": "root",
            "access": "r"
          },
          "configuration": "hadoop-env/hdfs_user_keytab",
          "group": {
            "name": "${cluster-env/user_group}",
            "access": "r"
          }
        }
      },
      {
        "principal": {
          "value": "hbase@${realm}",
          "configuration": "hbase-env/hbase_principal_name"
        },
        "name": "hbase",
        "keytab": {
          "file": "${keytab_dir}/hbase.headless.keytab",
          "owner": {
            "name": "root",
            "access": "r"
          },
          "configuration": "hbase-env/hbase_user_keytab",
          "group": {
            "name": "${cluster-env/user_group}",
            "access": "r"
          }
        }
      },
      {
        "principal": {
          "value": "ambari-qa@${realm}",
          "configuration": "cluster-env/smokeuser_principal_name"
        },
        "name": "smokeuser",
        "keytab": {
          "file": "${keytab_dir}/smokeuser.headless.keytab",
          "owner": {
            "name": "root",
            "access": "r"
          },
          "configuration": "cluster-env/smokeuser_keytab",
          "group": {
            "name": "${cluster-env/user_group}",
            "access": "r"
          }
        }
      }
    ],
    "configurations": [
      {
        "core-site": {
          "hadoop.security.authentication": "kerberos",
          "hadoop.rpc.protection": "authentication; integrity; privacy",
          "hadoop.security.authorization": "true"
        }
      }
    ],
    "services": [
      {
        "name": "HDFS",
        "components": [
          {
            "name": "NAMENODE",
            "identities": [
              {
                "name": "namenode_nn",
                "principal": {
                  "value": "nn/_HOST@${realm}",
                  "configuration": "hdfs-site/dfs.namenode.kerberos.principal"
                },
                "keytab": {
                  "file": "${keytab_dir}/nn.service.keytab",
                  "owner": {
                    "name": "${hadoop-env/hdfs_user}",
                    "access": "r"
                  },
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  },
                  "configuration": "hdfs-site/dfs.namenode.keytab.file"
                }
              },
              {
                "name": "namenode_host",
                "principal": {
                  "value": "host/_HOST@${realm}",
                  "configuration": "hdfs-site/dfs.namenode.kerberos.https.principal"
                },
                "keytab": {
                  "file": "${keytab_dir}/host.keytab",
                  "owner": {
                    "name": "${hadoop-env/hdfs_user}",
                    "access": "r"
                  },
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  },
                  "configuration": "hdfs-site/dfs.namenode.keytab.file"
                }
              },
              {
                "name": "/spnego",
                "principal": {
                  "configuration": "hdfs-site/dfs.web.authentication.kerberos.principal"
                },
                "keytab": {
                  "configuration": "hdfs/dfs.web.authentication.kerberos.keytab"
                }
              }
            ]
          },
          {
            "name": "DATANODE",
            "identities": [
              {
                "name": "datanode_dn",
                "principal": {
                  "value": "dn/_HOST@${realm}",
                  "configuration": "hdfs-site/dfs.namenode.kerberos.principal"
                },
                "keytab": {
                  "file": "${keytab_dir}/dn.service.keytab",
                  "owner": {
                    "name": "${hadoop-env/hdfs_user}",
                    "access": "r"
                  },
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  },
                  "configuration": "hdfs-site/dfs.namenode.keytab.file"
                }
              },
              {
                "name": "datanode_host",
                "principal": {
                  "value": "host/_HOST@${realm}",
                  "configuration": "hdfs-site/dfs.datanode.kerberos.https.principal"
                },
                "keytab": {
                  "file": "${keytab_dir}/host.keytab.file",
                  "owner": {
                    "name": "${hadoop-env/hdfs_user}",
                    "access": "r"
                  },
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  },
                  "configuration": "hdfs-site/dfs.namenode.secondary.keytab.file"
                }
              }
            ]
          },
          {
            "name": "SECONDARY_NAMENODE",
            "identities": [
              {
                "name": "secondary_namenode_nn",
                "principal": {
                  "value": "nn/_HOST@${realm}",
                  "configuration": "hdfs-site/dfs.namenode.secondary.kerberos.principal"
                },
                "keytab": {
                  "file": "${keytab_dir}/snn.service.keytab",
                  "owner": {
                    "name": "${hadoop-env/hdfs_user}",
                    "access": "r"
                  },
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  },
                  "configuration": "hdfs-site/dfs.namenode.secondary.keytab.file"
                }
              },
              {
                "name": "secondary_namenode_host",
                "principal": {
                  "value": "host/_HOST@${realm}",
                  "configuration": "hdfs-site/dfs.namenode.secondary.kerberos.https.principal"
                },
                "keytab": {
                  "file": "${keytab_dir}/host.keytab.file",
                  "owner": {
                    "name": "${hadoop-env/hdfs_user}",
                    "access": "r"
                  },
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  },
                  "configuration": "hdfs-site/dfs.namenode.secondary.keytab.file"
                }
              },
              {
                "name": "/spnego",
                "principal": {
                  "configuration": "hdfs-site/dfs.web.authentication.kerberos.principal"
                },
                "keytab": {
                  "configuration": "hdfs/dfs.web.authentication.kerberos.keytab"
                }
              }
            ]
          }
        ]
      },
      {
        "name": "FALCON",
        "identities": [
          {
            "name": "/spnego"
          },
          {
            "name": "/smokeuser"
          },
          {
            "name": "/hdfs"
          }
        ],
        "configurations": [
          {
            "falcon-startup.properties": {
              "*.falcon.http.authentication.type": "kerberos",
              "*.falcon.authentication.type": "kerberos",
              "*.dfs.namenode.kerberos.principal": "nn/_HOST@${realm}"
            }
          }
        ],
        "components": [
          {
            "name": "FALCON_SERVER",
            "identities": [
              {
                "principal": {
                  "value": "falcon/${host}@${realm}",
                  "configuration": "falcon-startup.properties/*.falcon.service.authentication.kerberos.principal"
                },
                "name": "falcon_server",
                "keytab": {
                  "file": "${keytab_dir}/falcon.service.keytab",
                  "owner": {
                    "name": "${falcon-env/falcon_user}",
                    "access": "r"
                  },
                  "configuration": "falcon-startup.properties/*.falcon.service.authentication.kerberos.keytab",
                  "group": {
                    "name": "${cluster-env/user_group}",
                    "access": ""
                  }
                }
              },
              {
                "principal": {
                  "value": "HTTP/${host}@${realm}",
                  "configuration": "falcon-startup.properties/oozie.authentication.kerberos.principal"
                },
                "name": "/spnego",
                "keytab": {
                  "file": null,
                  "owner": {
                    "name": null,
                    "access": null
                  },
                  "configuration": "falcon-startup.properties/oozie.authentication.kerberos.keytab",
                  "group": {
                    "name": null,
                    "access": null
                  }
                }
              }
            ]
          }
        ]
      }
    ]
  }
};