stack_descriptors.js 7.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213
  1. /**
  2. * Licensed to the Apache Software Foundation (ASF) under one
  3. * or more contributor license agreements. See the NOTICE file
  4. * distributed with this work for additional information
  5. * regarding copyright ownership. The ASF licenses this file
  6. * to you under the Apache License, Version 2.0 (the
  7. * "License"); you may not use this file except in compliance
  8. * with the License. You may obtain a copy of the License at
  9. *
  10. * http://www.apache.org/licenses/LICENSE-2.0
  11. *
  12. * Unless required by applicable law or agreed to in writing, software
  13. * distributed under the License is distributed on an "AS IS" BASIS,
  14. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15. * See the License for the specific language governing permissions and
  16. * limitations under the License.
  17. */
  18. module.exports = {
  19. "href": "http://162.216.148.139:8080/api/v1/stacks/HDP/versions/2.2?fields=Versions/kerberos_descriptor",
  20. "Versions": {
  21. "stack_name": "HDP",
  22. "stack_version": "2.2",
  23. "kerberos_descriptor": {
  24. "properties": {
  25. "realm": "${cluster-env/kerberos_domain}",
  26. "keytab_dir": "/etc/security/keytabs"
  27. },
  28. "identities": [
  29. {
  30. "name": "spnego",
  31. "principal": {
  32. "value": "HTTP/_HOST@${realm}"
  33. },
  34. "keytab": {
  35. "file": "${keytab_dir}/spnego.service.keytab",
  36. "owner": {
  37. "name": "root",
  38. "access": "r"
  39. },
  40. "group": {
  41. "name": "${cluster-env/user_group}",
  42. "access": "r"
  43. }
  44. }
  45. }
  46. ],
  47. "configurations": [
  48. {
  49. "core-site": {
  50. "hadoop.security.authentication": "kerberos",
  51. "hadoop.rpc.protection": "authentication; integrity; privacy",
  52. "hadoop.security.authorization": "true"
  53. }
  54. }
  55. ],
  56. "services": [
  57. {
  58. "name": "HDFS",
  59. "components": [
  60. {
  61. "name": "NAMENODE",
  62. "identities": [
  63. {
  64. "name": "namenode_nn",
  65. "principal": {
  66. "value": "nn/_HOST@${realm}",
  67. "configuration": "hdfs-site/dfs.namenode.kerberos.principal"
  68. },
  69. "keytab": {
  70. "file": "${keytab_dir}/nn.service.keytab",
  71. "owner": {
  72. "name": "${hadoop-env/hdfs_user}",
  73. "access": "r"
  74. },
  75. "group": {
  76. "name": "${cluster-env/user_group}",
  77. "access": ""
  78. },
  79. "configuration": "hdfs-site/dfs.namenode.keytab.file"
  80. }
  81. },
  82. {
  83. "name": "namenode_host",
  84. "principal": {
  85. "value": "host/_HOST@${realm}",
  86. "configuration": "hdfs-site/dfs.namenode.kerberos.https.principal"
  87. },
  88. "keytab": {
  89. "file": "${keytab_dir}/host.keytab",
  90. "owner": {
  91. "name": "${hadoop-env/hdfs_user}",
  92. "access": "r"
  93. },
  94. "group": {
  95. "name": "${cluster-env/user_group}",
  96. "access": ""
  97. },
  98. "configuration": "hdfs-site/dfs.namenode.keytab.file"
  99. }
  100. },
  101. {
  102. "name": "/spnego",
  103. "principal": {
  104. "configuration": "hdfs-site/dfs.web.authentication.kerberos.principal"
  105. },
  106. "keytab": {
  107. "configuration": "hdfs/dfs.web.authentication.kerberos.keytab"
  108. }
  109. }
  110. ]
  111. },
  112. {
  113. "name": "DATANODE",
  114. "identities": [
  115. {
  116. "name": "datanode_dn",
  117. "principal": {
  118. "value": "dn/_HOST@${realm}",
  119. "configuration": "hdfs-site/dfs.namenode.kerberos.principal"
  120. },
  121. "keytab": {
  122. "file": "${keytab_dir}/dn.service.keytab",
  123. "owner": {
  124. "name": "${hadoop-env/hdfs_user}",
  125. "access": "r"
  126. },
  127. "group": {
  128. "name": "${cluster-env/user_group}",
  129. "access": ""
  130. },
  131. "configuration": "hdfs-site/dfs.namenode.keytab.file"
  132. }
  133. },
  134. {
  135. "name": "datanode_host",
  136. "principal": {
  137. "value": "host/_HOST@${realm}",
  138. "configuration": "hdfs-site/dfs.datanode.kerberos.https.principal"
  139. },
  140. "keytab": {
  141. "file": "${keytab_dir}/host.keytab.file",
  142. "owner": {
  143. "name": "${hadoop-env/hdfs_user}",
  144. "access": "r"
  145. },
  146. "group": {
  147. "name": "${cluster-env/user_group}",
  148. "access": ""
  149. },
  150. "configuration": "hdfs-site/dfs.namenode.secondary.keytab.file"
  151. }
  152. }
  153. ]
  154. },
  155. {
  156. "name": "SECONDARY_NAMENODE",
  157. "identities": [
  158. {
  159. "name": "secondary_namenode_nn",
  160. "principal": {
  161. "value": "nn/_HOST@${realm}",
  162. "configuration": "hdfs-site/dfs.namenode.secondary.kerberos.principal"
  163. },
  164. "keytab": {
  165. "file": "${keytab_dir}/snn.service.keytab",
  166. "owner": {
  167. "name": "${hadoop-env/hdfs_user}",
  168. "access": "r"
  169. },
  170. "group": {
  171. "name": "${cluster-env/user_group}",
  172. "access": ""
  173. },
  174. "configuration": "hdfs-site/dfs.namenode.secondary.keytab.file"
  175. }
  176. },
  177. {
  178. "name": "secondary_namenode_host",
  179. "principal": {
  180. "value": "host/_HOST@${realm}",
  181. "configuration": "hdfs-site/dfs.namenode.secondary.kerberos.https.principal"
  182. },
  183. "keytab": {
  184. "file": "${keytab_dir}/host.keytab.file",
  185. "owner": {
  186. "name": "${hadoop-env/hdfs_user}",
  187. "access": "r"
  188. },
  189. "group": {
  190. "name": "${cluster-env/user_group}",
  191. "access": ""
  192. },
  193. "configuration": "hdfs-site/dfs.namenode.secondary.keytab.file"
  194. }
  195. },
  196. {
  197. "name": "/spnego",
  198. "principal": {
  199. "configuration": "hdfs-site/dfs.web.authentication.kerberos.principal"
  200. },
  201. "keytab": {
  202. "configuration": "hdfs/dfs.web.authentication.kerberos.keytab"
  203. }
  204. }
  205. ]
  206. }
  207. ]
  208. }
  209. ]
  210. }
  211. }
  212. };