secure_mapping.js 32 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030
  1. /**
  2. * Licensed to the Apache Software Foundation (ASF) under one
  3. * or more contributor license agreements. See the NOTICE file
  4. * distributed with this work for additional information
  5. * regarding copyright ownership. The ASF licenses this file
  6. * to you under the Apache License, Version 2.0 (the
  7. * "License"); you may not use this file except in compliance
  8. * with the License. You may obtain a copy of the License at
  9. *
  10. * http://www.apache.org/licenses/LICENSE-2.0
  11. *
  12. * Unless required by applicable law or agreed to in writing, software
  13. * distributed under the License is distributed on an "AS IS" BASIS,
  14. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15. * See the License for the specific language governing permissions and
  16. * limitations under the License.
  17. */
  18. var App = require('app');
  19. // All of the "name" properties have to coincide with how they will appear in the *-site.xml file
  20. // The "template" properties can come from the config properties in site_properties.js or secure_properties.js .
  21. var props = [
  22. {
  23. "name": "hadoop.security.authentication",
  24. "templateName": [],
  25. "foreignKey": null,
  26. "value": "kerberos",
  27. "nonSecureValue": "simple",
  28. "filename": "core-site.xml",
  29. "serviceName": "HDFS"
  30. },
  31. {
  32. "name": "hadoop.security.authorization",
  33. "templateName": [],
  34. "foreignKey": null,
  35. "value": "true",
  36. "nonSecureValue": "false",
  37. "filename": "core-site.xml",
  38. "serviceName": "HDFS"
  39. },
  40. {
  41. "name": "hadoop.security.auth_to_local",
  42. "templateName": ["resourcemanager_primary_name", "kerberos_domain", "yarn_user", "nodemanager_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_master_primary_name", "hbase_user","hbase_regionserver_primary_name","oozie_primary_name","oozie_user","jobhistory_primary_name","mapred_user","journalnode_principal_name","falcon_primary_name","falcon_user"],
  43. "foreignKey": null,
  44. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[10]>@.*<templateName[1]>)s/.*/<templateName[11]>/\nRULE:[2:$1@$0](<templateName[12]>@.*<templateName[1]>)s/.*/<templateName[13]>/\nRULE:[2:$1@$0](<templateName[14]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[15]>@.*<templateName[1]>)s/.*/<templateName[16]>/\nDEFAULT",
  45. "filename": "core-site.xml",
  46. "serviceName": "HDFS",
  47. "dependedServiceName": [{name: "HBASE", replace: "\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/"},{name: "OOZIE",replace: "\nRULE:[2:$1@$0](<templateName[10]>@.*<templateName[1]>)s/.*/<templateName[11]>/"},{name: "MAPREDUCE2",replace: "\nRULE:[2:$1@$0](<templateName[12]>@.*<templateName[1]>)s/.*/<templateName[13]>/"}]
  48. },
  49. {
  50. "name": "dfs.namenode.kerberos.principal",
  51. "templateName": ["namenode_principal_name", "kerberos_domain"],
  52. "foreignKey": null,
  53. "value": "<templateName[0]>@<templateName[1]>",
  54. "filename": "hdfs-site.xml",
  55. "serviceName": "HDFS"
  56. },
  57. {
  58. "name": "dfs.namenode.keytab.file",
  59. "templateName": ["namenode_keytab"],
  60. "foreignKey": null,
  61. "value": "<templateName[0]>",
  62. "filename": "hdfs-site.xml",
  63. "serviceName": "HDFS"
  64. },
  65. {
  66. "name": "dfs.secondary.namenode.kerberos.principal",
  67. "templateName": ["snamenode_principal_name", "kerberos_domain"],
  68. "foreignKey": null,
  69. "value": "<templateName[0]>@<templateName[1]>",
  70. "filename": "hdfs-site.xml",
  71. "serviceName": "HDFS"
  72. },
  73. {
  74. "name": "dfs.secondary.namenode.keytab.file",
  75. "templateName": ["snamenode_keytab"],
  76. "foreignKey": null,
  77. "value": "<templateName[0]>",
  78. "filename": "hdfs-site.xml",
  79. "serviceName": "HDFS"
  80. },
  81. {
  82. "name": "dfs.web.authentication.kerberos.principal",
  83. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  84. "foreignKey": null,
  85. "value": "<templateName[0]>@<templateName[1]>",
  86. "filename": "hdfs-site.xml",
  87. "serviceName": "HDFS"
  88. },
  89. {
  90. "name": "dfs.web.authentication.kerberos.keytab",
  91. "templateName": ["hadoop_http_keytab"],
  92. "foreignKey": null,
  93. "value": "<templateName[0]>",
  94. "filename": "hdfs-site.xml",
  95. "serviceName": "HDFS"
  96. },
  97. {
  98. "name": "dfs.datanode.kerberos.principal",
  99. "templateName": ["datanode_principal_name", "kerberos_domain"],
  100. "foreignKey": null,
  101. "value": "<templateName[0]>@<templateName[1]>",
  102. "filename": "hdfs-site.xml",
  103. "serviceName": "HDFS"
  104. },
  105. {
  106. "name": "dfs.datanode.keytab.file",
  107. "templateName": ["datanode_keytab"],
  108. "foreignKey": null,
  109. "value": "<templateName[0]>",
  110. "filename": "hdfs-site.xml",
  111. "serviceName": "HDFS"
  112. },
  113. {
  114. "name": "dfs.namenode.kerberos.internal.spnego.principal",
  115. "templateName": [],
  116. "foreignKey": null,
  117. "value": "${dfs.web.authentication.kerberos.principal}",
  118. "filename": "hdfs-site.xml",
  119. "serviceName": "HDFS"
  120. },
  121. {
  122. "name": "dfs.secondary.namenode.kerberos.internal.spnego.principal",
  123. "templateName": [],
  124. "foreignKey": null,
  125. "value": "${dfs.web.authentication.kerberos.principal}",
  126. "filename": "hdfs-site.xml",
  127. "serviceName": "HDFS"
  128. },
  129. {
  130. "name": "dfs.journalnode.kerberos.principal",
  131. "templateName": ["journalnode_principal_name", "kerberos_domain"],
  132. "foreignKey": null,
  133. "value": "<templateName[0]>@<templateName[1]>",
  134. "filename": "hdfs-site.xml",
  135. "serviceName": "HDFS"
  136. },
  137. {
  138. "name": "dfs.journalnode.kerberos.internal.spnego.principal",
  139. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  140. "foreignKey": null,
  141. "value": "<templateName[0]>@<templateName[1]>",
  142. "filename": "hdfs-site.xml",
  143. "serviceName": "HDFS"
  144. },
  145. {
  146. "name": "dfs.journalnode.keytab.file",
  147. "templateName": ["journalnode_keytab"],
  148. "foreignKey": null,
  149. "value": "<templateName[0]>",
  150. "filename": "hdfs-site.xml",
  151. "serviceName": "HDFS"
  152. },
  153. {
  154. "name": "dfs.datanode.address",
  155. "templateName": ["dfs_datanode_address"],
  156. "foreignKey": null,
  157. "value": "0.0.0.0:<templateName[0]>",
  158. "nonSecureValue": "0.0.0.0:50010",
  159. "filename": "hdfs-site.xml",
  160. "serviceName": "HDFS"
  161. },
  162. {
  163. "name": "dfs.datanode.http.address",
  164. "templateName": ["dfs_datanode_http_address"],
  165. "foreignKey": null,
  166. "value": "0.0.0.0:<templateName[0]>",
  167. "nonSecureValue": "0.0.0.0:50075",
  168. "filename": "hdfs-site.xml",
  169. "serviceName": "HDFS"
  170. },
  171. {
  172. "name": "mapreduce.jobhistory.principal",
  173. "templateName": ["jobhistory_principal_name", "kerberos_domain"],
  174. "foreignKey": null,
  175. "value": "<templateName[0]>@<templateName[1]>",
  176. "filename": "mapred-site.xml",
  177. "serviceName": "MAPREDUCE2"
  178. },
  179. {
  180. "name": "mapreduce.jobhistory.keytab",
  181. "templateName": ["jobhistory_keytab"],
  182. "foreignKey": null,
  183. "value": "<templateName[0]>",
  184. "filename": "mapred-site.xml",
  185. "serviceName": "MAPREDUCE2"
  186. },
  187. {
  188. "name": "mapreduce.jobhistory.webapp.spnego-principal",
  189. "templateName": ["jobhistory_http_principal_name", "kerberos_domain"],
  190. "foreignKey": null,
  191. "value": "<templateName[0]>@<templateName[1]>",
  192. "filename": "mapred-site.xml",
  193. "serviceName": "MAPREDUCE2"
  194. },
  195. {
  196. "name": "mapreduce.jobhistory.webapp.spnego-keytab-file",
  197. "templateName": ["jobhistory_http_keytab"],
  198. "foreignKey": null,
  199. "value": "<templateName[0]>",
  200. "filename": "mapred-site.xml",
  201. "serviceName": "MAPREDUCE2"
  202. },
  203. {
  204. "name": "yarn.timeline-service.enabled",
  205. "templateName": [],
  206. "foreignKey": null,
  207. "value": App.get('isHadoop22Stack') ? "true" : "false",
  208. "nonSecureValue": "false",
  209. "filename": "yarn-site.xml",
  210. "serviceName": "YARN"
  211. },
  212. {
  213. "name": "yarn.acl.enable",
  214. "templateName": [],
  215. "foreignKey": null,
  216. "value": "true",
  217. "nonSecureValue": "false",
  218. "filename": "yarn-site.xml",
  219. "serviceName": "YARN"
  220. },
  221. // YARN Timeline Service
  222. // These "http-authentication" properties are supported in HDP Champlain
  223. {
  224. "name": "yarn.timeline-service.principal",
  225. "templateName": ["apptimelineserver_principal_name", "kerberos_domain"],
  226. "foreignKey": null,
  227. "value": "<templateName[0]>@<templateName[1]>",
  228. "filename": "yarn-site.xml",
  229. "serviceName": "YARN"
  230. },
  231. {
  232. "name": "yarn.timeline-service.keytab",
  233. "templateName": ["apptimelineserver_keytab"],
  234. "foreignKey": null,
  235. "value": "<templateName[0]>",
  236. "filename": "yarn-site.xml",
  237. "serviceName": "YARN"
  238. },
  239. {
  240. "name": "yarn.timeline-service.http-authentication.type",
  241. "templateName": [],
  242. "foreignKey": null,
  243. "value": "kerberos",
  244. "filename": "yarn-site.xml",
  245. "serviceName": "YARN"
  246. },
  247. {
  248. "name": "yarn.timeline-service.http-authentication.kerberos.principal",
  249. "templateName": ["apptimelineserver_http_principal_name", "kerberos_domain"],
  250. "foreignKey": null,
  251. "value": "<templateName[0]>@<templateName[1]>",
  252. "filename": "yarn-site.xml",
  253. "serviceName": "YARN"
  254. },
  255. {
  256. "name": "yarn.timeline-service.http-authentication.kerberos.keytab",
  257. "templateName": ["apptimelineserver_http_keytab"],
  258. "foreignKey": null,
  259. "value": "<templateName[0]>",
  260. "filename": "yarn-site.xml",
  261. "serviceName": "YARN"
  262. },
  263. // YARN Resource Manager
  264. {
  265. "name": "yarn.resourcemanager.principal",
  266. "templateName": ["resourcemanager_principal_name", "kerberos_domain"],
  267. "foreignKey": null,
  268. "value": "<templateName[0]>@<templateName[1]>",
  269. "filename": "yarn-site.xml",
  270. "serviceName": "YARN"
  271. },
  272. {
  273. "name": "yarn.resourcemanager.keytab",
  274. "templateName": ["resourcemanager_keytab"],
  275. "foreignKey": null,
  276. "value": "<templateName[0]>",
  277. "filename": "yarn-site.xml",
  278. "serviceName": "YARN"
  279. },
  280. {
  281. "name": "yarn.nodemanager.principal",
  282. "templateName": ["nodemanager_principal_name", "kerberos_domain"],
  283. "foreignKey": null,
  284. "value": "<templateName[0]>@<templateName[1]>",
  285. "filename": "yarn-site.xml",
  286. "serviceName": "YARN"
  287. },
  288. {
  289. "name": "yarn.nodemanager.keytab",
  290. "templateName": ["nodemanager_keytab"],
  291. "foreignKey": null,
  292. "value": "<templateName[0]>",
  293. "filename": "yarn-site.xml",
  294. "serviceName": "YARN"
  295. },
  296. {
  297. "name": "yarn.resourcemanager.webapp.spnego-principal",
  298. "templateName": ["resourcemanager_http_principal_name", "kerberos_domain"],
  299. "foreignKey": null,
  300. "value": "<templateName[0]>@<templateName[1]>",
  301. "filename": "yarn-site.xml",
  302. "serviceName": "YARN"
  303. },
  304. {
  305. "name": "yarn.resourcemanager.webapp.spnego-keytab-file",
  306. "templateName": ["resourcemanager_http_keytab"],
  307. "foreignKey": null,
  308. "value": "<templateName[0]>",
  309. "filename": "yarn-site.xml",
  310. "serviceName": "YARN"
  311. },
  312. {
  313. "name": "yarn.nodemanager.webapp.spnego-principal",
  314. "templateName": ["nodemanager_http_principal_name", "kerberos_domain"],
  315. "foreignKey": null,
  316. "value": "<templateName[0]>@<templateName[1]>",
  317. "filename": "yarn-site.xml",
  318. "serviceName": "YARN"
  319. },
  320. {
  321. "name": "yarn.nodemanager.webapp.spnego-keytab-file",
  322. "templateName": ["nodemanager_http_keytab"],
  323. "foreignKey": null,
  324. "value": "<templateName[0]>",
  325. "filename": "yarn-site.xml",
  326. "serviceName": "YARN"
  327. },
  328. {
  329. "name": "yarn.nodemanager.container-executor.class",
  330. "templateName": ["yarn_nodemanager_container-executor_class"],
  331. "foreignKey": null,
  332. "value": "<templateName[0]>",
  333. "nonSecureValue": "org.apache.hadoop.yarn.server.nodemanager.DefaultContainerExecutor",
  334. "filename": "yarn-site.xml",
  335. "serviceName": "YARN"
  336. },
  337. {
  338. "name": "hbase.master.kerberos.principal",
  339. "templateName": ["hbase_master_principal_name", "kerberos_domain"],
  340. "foreignKey": null,
  341. "value": "<templateName[0]>@<templateName[1]>",
  342. "filename": "hbase-site.xml",
  343. "serviceName": "HBASE"
  344. },
  345. {
  346. "name": "hbase.master.keytab.file",
  347. "templateName": ["hbase_master_keytab"],
  348. "foreignKey": null,
  349. "value": "<templateName[0]>",
  350. "filename": "hbase-site.xml",
  351. "serviceName": "HBASE"
  352. },
  353. {
  354. "name": "hbase.regionserver.kerberos.principal",
  355. "templateName": ["hbase_regionserver_principal_name", "kerberos_domain"],
  356. "foreignKey": null,
  357. "value": "<templateName[0]>@<templateName[1]>",
  358. "filename": "hbase-site.xml",
  359. "serviceName": "HBASE"
  360. },
  361. {
  362. "name": "hbase.regionserver.keytab.file",
  363. "templateName": ["hbase_regionserver_keytab"],
  364. "foreignKey": null,
  365. "value": "<templateName[0]>",
  366. "filename": "hbase-site.xml",
  367. "serviceName": "HBASE"
  368. },
  369. {
  370. "name": "hive.metastore.sasl.enabled",
  371. "templateName": [],
  372. "foreignKey": null,
  373. "value": "true",
  374. "nonSecureValue": "false",
  375. "filename": "hive-site.xml",
  376. "serviceName": "HIVE"
  377. },
  378. {
  379. "name": "hive.security.authorization.enabled",
  380. "templateName": [],
  381. "foreignKey": null,
  382. "value": "true",
  383. "nonSecureValue": "false",
  384. "filename": "hive-site.xml",
  385. "serviceName": "HIVE"
  386. },
  387. {
  388. "name": "hive.server2.authentication",
  389. "templateName": [],
  390. "foreignKey": null,
  391. "value": "KERBEROS",
  392. "nonSecureValue": "NONE",
  393. "filename": "hive-site.xml",
  394. "serviceName": "HIVE"
  395. },
  396. {
  397. "name": "hive.metastore.kerberos.principal",
  398. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  399. "foreignKey": null,
  400. "value": "<templateName[0]>@<templateName[1]>",
  401. "filename": "hive-site.xml",
  402. "serviceName": "HIVE"
  403. },
  404. {
  405. "name": "hive.metastore.kerberos.keytab.file",
  406. "templateName": ["hive_metastore_keytab"],
  407. "foreignKey": null,
  408. "value": "<templateName[0]>",
  409. "filename": "hive-site.xml",
  410. "serviceName": "HIVE"
  411. },
  412. {
  413. "name": "hive.server2.authentication.kerberos.principal",
  414. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  415. "foreignKey": null,
  416. "value": "<templateName[0]>@<templateName[1]>",
  417. "filename": "hive-site.xml",
  418. "serviceName": "HIVE"
  419. },
  420. {
  421. "name": "hive.server2.authentication.kerberos.keytab",
  422. "templateName": ["hive_metastore_keytab"],
  423. "foreignKey": null,
  424. "value": "<templateName[0]>",
  425. "filename": "hive-site.xml",
  426. "serviceName": "HIVE"
  427. },
  428. {
  429. "name": "hive.server2.authentication.spnego.principal",
  430. "templateName": ["hive_metastore_http_principal_name", "kerberos_domain"],
  431. "foreignKey": null,
  432. "value": "<templateName[0]>@<templateName[1]>",
  433. "filename": "hive-site.xml",
  434. "serviceName": "HIVE"
  435. },
  436. {
  437. "name": "hive.server2.authentication.spnego.keytab",
  438. "templateName": ["hive_metastore_http_keytab"],
  439. "foreignKey": null,
  440. "value": "<templateName[0]>",
  441. "filename": "hive-site.xml",
  442. "serviceName": "HIVE"
  443. },
  444. {
  445. "name": "oozie.service.AuthorizationService.authorization.enabled",
  446. "templateName": [],
  447. "foreignKey": null,
  448. "value": "true",
  449. "filename": "oozie-site.xml",
  450. "serviceName": "OOZIE"
  451. },
  452. {
  453. "name": "oozie.service.HadoopAccessorService.kerberos.enabled",
  454. "templateName": [],
  455. "foreignKey": null,
  456. "value": "true",
  457. "nonSecureValue": "false",
  458. "filename": "oozie-site.xml",
  459. "serviceName": "OOZIE"
  460. },
  461. {
  462. "name": "local.realm",
  463. "templateName": ["kerberos_domain"],
  464. "foreignKey": null,
  465. "value": "<templateName[0]>",
  466. "filename": "oozie-site.xml",
  467. "serviceName": "OOZIE"
  468. },
  469. {
  470. "name": "oozie.service.HadoopAccessorService.keytab.file",
  471. "templateName": ["oozie_keytab"],
  472. "foreignKey": null,
  473. "value": "<templateName[0]>",
  474. "filename": "oozie-site.xml",
  475. "serviceName": "OOZIE"
  476. },
  477. {
  478. "name": "oozie.service.HadoopAccessorService.kerberos.principal",
  479. "templateName": ["oozie_principal_name", "kerberos_domain"],
  480. "foreignKey": null,
  481. "value": "<templateName[0]>@<templateName[1]>",
  482. "filename": "oozie-site.xml",
  483. "serviceName": "OOZIE"
  484. },
  485. {
  486. "name": "oozie.authentication.type",
  487. "templateName": [],
  488. "foreignKey": null,
  489. "value": "kerberos",
  490. "nonSecureValue": "simple",
  491. "filename": "oozie-site.xml",
  492. "serviceName": "OOZIE"
  493. },
  494. {
  495. "name": "oozie.authentication.kerberos.principal",
  496. "templateName": ["oozie_http_principal_name", "kerberos_domain"],
  497. "foreignKey": null,
  498. "value": "<templateName[0]>@<templateName[1]>",
  499. "filename": "oozie-site.xml",
  500. "serviceName": "OOZIE"
  501. },
  502. {
  503. "name": "oozie.authentication.kerberos.keytab",
  504. "templateName": ["oozie_http_keytab"],
  505. "foreignKey": null,
  506. "value": "<templateName[0]>",
  507. "filename": "oozie-site.xml",
  508. "serviceName": "OOZIE"
  509. },
  510. {
  511. "name": "oozie.authentication.kerberos.name.rules",
  512. "templateName": ["resourcemanager_primary_name", "kerberos_domain", "yarn_user", "nodemanager_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_master_primary_name", "hbase_user","hbase_regionserver_primary_name"],
  513. "foreignKey": null,
  514. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nDEFAULT",
  515. "filename": "oozie-site.xml",
  516. "serviceName": "OOZIE",
  517. "dependedServiceName": [{name: "HBASE", replace: "\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/"}]
  518. },
  519. {
  520. "name": "templeton.kerberos.principal",
  521. "templateName": ["webHCat_http_principal_name", "kerberos_domain"],
  522. "foreignKey": null,
  523. "value": "<templateName[0]>@<templateName[1]>",
  524. "filename": "webhcat-site.xml",
  525. "serviceName": "HIVE"
  526. },
  527. {
  528. "name": "templeton.kerberos.keytab",
  529. "templateName": ["webhcat_http_keytab"],
  530. "foreignKey": null,
  531. "value": "<templateName[0]>",
  532. "filename": "webhcat-site.xml",
  533. "serviceName": "HIVE"
  534. },
  535. {
  536. "name": "templeton.kerberos.secret",
  537. "templateName": [""],
  538. "foreignKey": null,
  539. "value": "secret",
  540. "filename": "webhcat-site.xml",
  541. "serviceName": "HIVE"
  542. },
  543. {
  544. "name": "templeton.hive.properties",
  545. "templateName": ["hive_metastore","hive_metastore_principal_name","kerberos_domain"],
  546. "foreignKey": null,
  547. "value": "hive.metastore.local=false,hive.metastore.uris=<templateName[0]>,hive." +
  548. "metastore.sasl.enabled=true,hive.metastore.execute.setugi=true,hive.metastore.warehouse.dir=/apps/hive/warehouse,hive.exec.mode.local.auto=false,hive.metastore.kerberos.principal=<templateName[1]>@<templateName[2]>",
  549. "filename": "webhcat-site.xml",
  550. "serviceName": "HIVE"
  551. },
  552. {
  553. "name": "hbase.coprocessor.master.classes",
  554. "templateName": [],
  555. "foreignKey": null,
  556. "value": "org.apache.hadoop.hbase.security.access.AccessController",
  557. "filename": "hbase-site.xml",
  558. "serviceName": "HBASE"
  559. },
  560. {
  561. "name": "hbase.coprocessor.region.classes",
  562. "templateName": [],
  563. "foreignKey": null,
  564. "value": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController",
  565. "filename": "hbase-site.xml",
  566. "serviceName": "HBASE"
  567. },
  568. {
  569. "name": "hbase.security.authentication",
  570. "templateName": [],
  571. "foreignKey": null,
  572. "value": "kerberos",
  573. "nonSecureValue": "simple",
  574. "filename": "hbase-site.xml",
  575. "serviceName": "HBASE"
  576. },
  577. {
  578. "name": "hbase.security.authorization",
  579. "templateName": [],
  580. "foreignKey": null,
  581. "value": "true",
  582. "nonSecureValue": "false",
  583. "filename": "hbase-site.xml",
  584. "serviceName": "HBASE"
  585. },
  586. {
  587. "name": "hbase.coprocessor.region.classes",
  588. "templateName": [],
  589. "foreignKey": null,
  590. "value": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController",
  591. "filename": "hbase-site.xml",
  592. "serviceName": "HBASE"
  593. },
  594. {
  595. "name": "hbase.bulkload.staging.dir",
  596. "templateName": [],
  597. "foreignKey": null,
  598. "value": "/apps/hbase/staging",
  599. "filename": "hbase-site.xml",
  600. "serviceName": "HBASE"
  601. },
  602. {
  603. "name": "zookeeper.znode.parent",
  604. "templateName": [],
  605. "foreignKey": null,
  606. "value": "/hbase-secure",
  607. "nonSecureValue": "/hbase-unsecure",
  608. "filename": "hbase-site.xml",
  609. "serviceName": "HBASE"
  610. },
  611. /***************************************FALCON***********************************************/
  612. {
  613. "name": "*.falcon.authentication.type",
  614. "templateName": [],
  615. "foreignKey": null,
  616. "value": "kerberos",
  617. "nonSecureValue": "simple",
  618. "filename": "falcon-startup.properties.xml",
  619. "serviceName": "FALCON"
  620. },
  621. {
  622. "name": "*.falcon.http.authentication.type",
  623. "templateName": [],
  624. "foreignKey": null,
  625. "value": "kerberos",
  626. "nonSecureValue": "simple",
  627. "filename": "falcon-startup.properties.xml",
  628. "serviceName": "FALCON"
  629. },
  630. {
  631. "name": "*.falcon.service.authentication.kerberos.principal",
  632. "templateName": ["falcon_principal_name", "kerberos_domain"],
  633. "foreignKey": null,
  634. "value": "<templateName[0]>@<templateName[1]>",
  635. "filename": "falcon-startup.properties.xml",
  636. "serviceName": "FALCON"
  637. },
  638. {
  639. "name": "*.falcon.service.authentication.kerberos.keytab",
  640. "templateName": ["falcon_keytab"],
  641. "foreignKey": null,
  642. "value": "<templateName[0]>",
  643. "filename": "falcon-startup.properties.xml",
  644. "serviceName": "FALCON"
  645. },
  646. {
  647. "name": "*.falcon.http.authentication.kerberos.principal",
  648. "templateName": ["falcon_http_principal_name", "kerberos_domain"],
  649. "foreignKey": null,
  650. "value": "<templateName[0]>@<templateName[1]>",
  651. "filename": "falcon-startup.properties.xml",
  652. "serviceName": "FALCON"
  653. },
  654. {
  655. "name": "*.falcon.http.authentication.kerberos.keytab",
  656. "templateName": ["falcon_http_keytab"],
  657. "foreignKey": null,
  658. "value": "<templateName[0]>",
  659. "filename": "falcon-startup.properties.xml",
  660. "serviceName": "FALCON"
  661. },
  662. {
  663. "name": "*.dfs.namenode.kerberos.principal",
  664. "templateName": ["namenode_principal_name_falcon", "kerberos_domain"],
  665. "foreignKey": null,
  666. "value": "<templateName[0]>@<templateName[1]>",
  667. "filename": "falcon-startup.properties.xml",
  668. "serviceName": "FALCON"
  669. },
  670. /***************************************KNOX***********************************************/
  671. {
  672. "name": "gateway.hadoop.kerberos.secured",
  673. "templateName": [],
  674. "foreignKey": null,
  675. "value": "true",
  676. "nonSecureValue": "false",
  677. "filename": "gateway-site.xml",
  678. "serviceName": "KNOX"
  679. },
  680. {
  681. "name": "java.security.krb5.conf",
  682. "templateName": [],
  683. "foreignKey": null,
  684. "value": "/etc/krb5.conf",
  685. "filename": "gateway-site.xml",
  686. "serviceName": "KNOX"
  687. },
  688. {
  689. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  690. "templateName": ["proxyuser_group"],
  691. "foreignKey": ["knox_primary_name"],
  692. "value": "<templateName[0]>",
  693. "filename": "core-site.xml",
  694. "serviceName": "KNOX"
  695. },
  696. {
  697. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  698. "templateName": ["knox_gateway_hosts"],
  699. "foreignKey": ["knox_primary_name"],
  700. "value": "<templateName[0]>",
  701. "filename": "core-site.xml",
  702. "serviceName": "KNOX"
  703. },
  704. {
  705. "name": "webhcat.proxyuser.<foreignKey[0]>.groups",
  706. "templateName": ["proxyuser_group"],
  707. "foreignKey": ["knox_primary_name"],
  708. "value": "<templateName[0]>",
  709. "filename": "webhcat-site.xml",
  710. "serviceName": "KNOX"
  711. },
  712. {
  713. "name": "webhcat.proxyuser.<foreignKey[0]>.hosts",
  714. "templateName": ["knox_gateway_hosts"],
  715. "foreignKey": ["knox_primary_name"],
  716. "value": "<templateName[0]>",
  717. "filename": "webhcat-site.xml",
  718. "serviceName": "KNOX"
  719. },
  720. {
  721. "name": "oozie.service.ProxyUserService.proxyuser.<foreignKey[0]>.groups",
  722. "templateName": ["proxyuser_group"],
  723. "foreignKey": ["knox_primary_name"],
  724. "value": "<templateName[0]>",
  725. "filename": "oozie-site.xml",
  726. "serviceName": "KNOX"
  727. },
  728. {
  729. "name": "oozie.service.ProxyUserService.proxyuser.<foreignKey[0]>.hosts",
  730. "templateName": ["knox_gateway_hosts"],
  731. "foreignKey": ["knox_primary_name"],
  732. "value": "<templateName[0]>",
  733. "filename": "oozie-site.xml",
  734. "serviceName": "KNOX"
  735. },
  736. /***************************************core-site***************************************************/
  737. {
  738. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  739. "templateName": ["proxyuser_group"],
  740. "foreignKey": ["hive_metastore_primary_name"],
  741. "value": "<templateName[0]>",
  742. "filename": "core-site.xml",
  743. "serviceName": "HIVE"
  744. },
  745. {
  746. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  747. "templateName": ["hive_metastore"],
  748. "foreignKey": ["hive_metastore_primary_name"],
  749. "value": "<templateName[0]>",
  750. "filename": "core-site.xml",
  751. "serviceName": "HIVE"
  752. },
  753. {
  754. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  755. "templateName": ["proxyuser_group"],
  756. "foreignKey": ["oozie_primary_name"],
  757. "value": "<templateName[0]>",
  758. "filename": "core-site.xml",
  759. "serviceName": "OOZIE"
  760. },
  761. {
  762. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  763. "templateName": ["oozieserver_host"],
  764. "foreignKey": ["oozie_primary_name"],
  765. "value": "<templateName[0]>",
  766. "filename": "core-site.xml",
  767. "serviceName": "OOZIE"
  768. },
  769. {
  770. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  771. "templateName": ["proxyuser_group"],
  772. "foreignKey": ["webHCat_http_primary_name"],
  773. "value": "<templateName[0]>",
  774. "filename": "core-site.xml",
  775. "serviceName": "HIVE"
  776. },
  777. {
  778. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  779. "templateName": ["webhcat_server"],
  780. "foreignKey": ["webHCat_http_primary_name"],
  781. "value": "<templateName[0]>",
  782. "filename": "core-site.xml",
  783. "serviceName": "HIVE"
  784. }
  785. ];
  786. var yarn22Mapping = [
  787. {
  788. "name": 'hadoop.http.authentication.kerberos.principal',
  789. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  790. "foreignKey": null,
  791. "value": "<templateName[0]>@<templateName[1]>",
  792. "serviceName": "HDFS",
  793. "filename": "core-site.xml"
  794. },
  795. {
  796. "name": 'hadoop.http.authentication.kerberos.keytab',
  797. "foreignKey": null,
  798. "templateName": ["hadoop_http_keytab"],
  799. "value": "<templateName[0]>",
  800. "serviceName": "HDFS",
  801. "filename": "core-site.xml"
  802. },
  803. {
  804. name: 'hadoop.http.authentication.kerberos.name.rules',
  805. templateName: [],
  806. foreignKey: null,
  807. value: "",
  808. "serviceName": "HDFS",
  809. "filename": "core-site.xml"
  810. },
  811. {
  812. "name": 'yarn.timeline-service.http-authentication.signature.secret',
  813. "templateName": [],
  814. "foreignKey": null,
  815. "value": "",
  816. "serviceName": "YARN",
  817. "filename": "yarn-site.xml"
  818. },
  819. {
  820. "name": 'yarn.timeline-service.http-authentication.signature.secret.file',
  821. "value": "",
  822. "templateName": [],
  823. "foreignKey": null,
  824. "serviceName": "YARN",
  825. "filename": "yarn-site.xml"
  826. },
  827. {
  828. "name": 'yarn.timeline-service.http-authentication.signer.secret.provider',
  829. "value": "",
  830. "templateName": [],
  831. "foreignKey": null,
  832. "serviceName": "YARN",
  833. "filename": "yarn-site.xml"
  834. },
  835. {
  836. "name": 'yarn.timeline-service.http-authentication.signer.secret.provider.object',
  837. "value": "",
  838. "templateName": [],
  839. "foreignKey": null,
  840. "serviceName": "YARN",
  841. "filename": "yarn-site.xml"
  842. },
  843. {
  844. "name": 'yarn.timeline-service.http-authentication.token.validity',
  845. "templateName": [],
  846. "foreignKey": null,
  847. "value": "",
  848. "serviceName": "YARN",
  849. "filename": "yarn-site.xml"
  850. },
  851. {
  852. "name": 'yarn.timeline-service.http-authentication.cookie.domain',
  853. "value": "",
  854. "templateName": [],
  855. "foreignKey": null,
  856. "serviceName": "YARN",
  857. "filename": "yarn-site.xml"
  858. },
  859. {
  860. "name": 'yarn.timeline-service.http-authentication.cookie.path',
  861. "value": "",
  862. "templateName": [],
  863. "foreignKey": null,
  864. "serviceName": "YARN",
  865. "filename": "yarn-site.xml"
  866. },
  867. {
  868. "name": 'yarn.timeline-service.http-authentication.simple.anonymous.allowed',
  869. "value": "true",
  870. "templateName": [],
  871. "foreignKey": null,
  872. "serviceName": "YARN",
  873. "filename": "yarn-site.xml"
  874. },
  875. {
  876. "name": 'yarn.timeline-service.http-authentication.proxyusers.*.hosts',
  877. "value": "",
  878. "templateName": [],
  879. "foreignKey": null,
  880. "serviceName": "YARN",
  881. "filename": "yarn-site.xml"
  882. },
  883. {
  884. "name": 'yarn.timeline-service.http-authentication.proxyusers.*.users',
  885. "value": "",
  886. "serviceName": "YARN",
  887. "templateName": [],
  888. "foreignKey": null,
  889. "filename": "yarn-site.xml"
  890. },
  891. {
  892. "name": 'yarn.timeline-service.http-authentication.proxyusers.*.groups',
  893. "value": "",
  894. "templateName": [],
  895. "foreignKey": null,
  896. "serviceName": "YARN",
  897. "filename": "yarn-site.xml"
  898. },
  899. {
  900. "name": 'hadoop.http.filter.initializers',
  901. "value": "",
  902. "templateName": [],
  903. "foreignKey": null,
  904. "serviceName": "HDFS",
  905. "filename": "core-site.xml"
  906. },
  907. {
  908. "name": 'hadoop.http.authentication.type',
  909. "value": "simple",
  910. "templateName": [],
  911. "foreignKey": null,
  912. "serviceName": "HDFS",
  913. "filename": "core-site.xml"
  914. },
  915. {
  916. "name": 'hadoop.http.authentication.signature.secret',
  917. "value": "",
  918. "templateName": [],
  919. "foreignKey": null,
  920. "serviceName": "HDFS",
  921. "filename": "core-site.xml"
  922. },
  923. {
  924. "name": 'hadoop.http.authentication.signature.secret.file',
  925. "value": "",
  926. "templateName": [],
  927. "foreignKey": null,
  928. "serviceName": "HDFS",
  929. "filename": "core-site.xml"
  930. },
  931. {
  932. "name": 'hadoop.http.authentication.signer.secret.provider',
  933. "value": "",
  934. "templateName": [],
  935. "foreignKey": null,
  936. "serviceName": "HDFS",
  937. "filename": "core-site.xml"
  938. },
  939. {
  940. "name": 'hadoop.http.authentication.signer.secret.provider.object',
  941. "value": "",
  942. "templateName": [],
  943. "foreignKey": null,
  944. "serviceName": "HDFS",
  945. "filename": "core-site.xml"
  946. },
  947. {
  948. "name": 'hadoop.http.authentication.token.validity',
  949. "value": "",
  950. "templateName": [],
  951. "foreignKey": null,
  952. "serviceName": "HDFS",
  953. "filename": "core-site.xml"
  954. },
  955. {
  956. "name": 'hadoop.http.authentication.cookie.domain',
  957. "value": "",
  958. "templateName": [],
  959. "foreignKey": null,
  960. "serviceName": "HDFS",
  961. "filename": "core-site.xml"
  962. },
  963. {
  964. "name": 'hadoop.http.authentication.cookie.path',
  965. "value": "",
  966. "templateName": [],
  967. "foreignKey": null,
  968. "serviceName": "HDFS",
  969. "filename": "core-site.xml"
  970. },
  971. {
  972. "name": 'yarn.timeline-service.http-authentication.kerberos.name.rules',
  973. "value": "",
  974. "templateName": [],
  975. "foreignKey": null,
  976. "serviceName": "YARN",
  977. "filename": "yarn-site.xml"
  978. },
  979. {
  980. "name": 'yarn.resourcemanager.proxyusers.*.hosts',
  981. "value": "",
  982. "templateName": [],
  983. "foreignKey": null,
  984. "serviceName": "YARN",
  985. "filename": "yarn-site.xml"
  986. },
  987. {
  988. "name": 'yarn.resourcemanager.proxyusers.*.users',
  989. "value": "",
  990. "templateName": [],
  991. "foreignKey": null,
  992. "serviceName": "YARN",
  993. "filename": "yarn-site.xml"
  994. },
  995. {
  996. "name": 'yarn.resourcemanager.proxyusers.*.groups',
  997. "value": "",
  998. "templateName": [],
  999. "foreignKey": null,
  1000. "serviceName": "YARN",
  1001. "filename": "yarn-site.xml"
  1002. },
  1003. {
  1004. "name": 'yarn.resourcemanager.proxy-user-privileges.enabled',
  1005. "value": "true",
  1006. "templateName": [],
  1007. "foreignKey": null,
  1008. "serviceName": "YARN",
  1009. "filename": "yarn-site.xml"
  1010. },
  1011. {
  1012. "name": 'yarn.nodemanager.linux-container-executor.cgroups.mount-path',
  1013. "value": "",
  1014. "templateName": [],
  1015. "foreignKey": null,
  1016. "serviceName": "YARN",
  1017. "filename": "yarn-site.xml"
  1018. }
  1019. ];
  1020. if (App.get('isHadoop22Stack')) {
  1021. props.pushObjects(yarn22Mapping);
  1022. }
  1023. module.exports = props;