secure_mapping.js 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640
  1. /**
  2. * Licensed to the Apache Software Foundation (ASF) under one
  3. * or more contributor license agreements. See the NOTICE file
  4. * distributed with this work for additional information
  5. * regarding copyright ownership. The ASF licenses this file
  6. * to you under the Apache License, Version 2.0 (the
  7. * "License"); you may not use this file except in compliance
  8. * with the License. You may obtain a copy of the License at
  9. *
  10. * http://www.apache.org/licenses/LICENSE-2.0
  11. *
  12. * Unless required by applicable law or agreed to in writing, software
  13. * distributed under the License is distributed on an "AS IS" BASIS,
  14. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15. * See the License for the specific language governing permissions and
  16. * limitations under the License.
  17. */
  18. module.exports = [
  19. {
  20. "name": "hadoop.security.authentication",
  21. "templateName": [],
  22. "foreignKey": null,
  23. "value": "kerberos",
  24. "nonSecureValue": "simple",
  25. "filename": "core-site.xml",
  26. "serviceName": "HDFS"
  27. },
  28. {
  29. "name": "hadoop.security.authorization",
  30. "templateName": [],
  31. "foreignKey": null,
  32. "value": "true",
  33. "nonSecureValue": "false",
  34. "filename": "core-site.xml",
  35. "serviceName": "HDFS"
  36. },
  37. {
  38. "name": "hadoop.security.auth_to_local",
  39. "templateName": ["resourcemanager_primary_name", "kerberos_domain", "yarn_user", "nodemanager_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_master_primary_name", "hbase_user","hbase_regionserver_primary_name","oozie_primary_name","oozie_user","jobhistory_primary_name","mapred_user","journalnode_principal_name","falcon_primary_name","falcon_user"],
  40. "foreignKey": null,
  41. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[10]>@.*<templateName[1]>)s/.*/<templateName[11]>/\nRULE:[2:$1@$0](<templateName[12]>@.*<templateName[1]>)s/.*/<templateName[13]>/\nRULE:[2:$1@$0](<templateName[14]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[15]>@.*<templateName[1]>)s/.*/<templateName[16]>/\nDEFAULT",
  42. "filename": "core-site.xml",
  43. "serviceName": "HDFS",
  44. "dependedServiceName": [{name: "HBASE", replace: "\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/"},{name: "OOZIE",replace: "\nRULE:[2:$1@$0](<templateName[10]>@.*<templateName[1]>)s/.*/<templateName[11]>/"},{name: "MAPREDUCE2",replace: "\nRULE:[2:$1@$0](<templateName[12]>@.*<templateName[1]>)s/.*/<templateName[13]>/"}]
  45. },
  46. {
  47. "name": "dfs.namenode.kerberos.principal",
  48. "templateName": ["namenode_principal_name", "kerberos_domain"],
  49. "foreignKey": null,
  50. "value": "<templateName[0]>@<templateName[1]>",
  51. "filename": "hdfs-site.xml",
  52. "serviceName": "HDFS"
  53. },
  54. {
  55. "name": "dfs.namenode.keytab.file",
  56. "templateName": ["namenode_keytab"],
  57. "foreignKey": null,
  58. "value": "<templateName[0]>",
  59. "filename": "hdfs-site.xml",
  60. "serviceName": "HDFS"
  61. },
  62. {
  63. "name": "dfs.secondary.namenode.kerberos.principal",
  64. "templateName": ["snamenode_principal_name", "kerberos_domain"],
  65. "foreignKey": null,
  66. "value": "<templateName[0]>@<templateName[1]>",
  67. "filename": "hdfs-site.xml"
  68. },
  69. {
  70. "name": "dfs.secondary.namenode.keytab.file",
  71. "templateName": ["snamenode_keytab"],
  72. "foreignKey": null,
  73. "value": "<templateName[0]>",
  74. "filename": "hdfs-site.xml",
  75. "serviceName": "HDFS"
  76. },
  77. {
  78. "name": "dfs.web.authentication.kerberos.principal",
  79. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  80. "foreignKey": null,
  81. "value": "<templateName[0]>@<templateName[1]>",
  82. "filename": "hdfs-site.xml",
  83. "serviceName": "HDFS"
  84. },
  85. {
  86. "name": "dfs.web.authentication.kerberos.keytab",
  87. "templateName": ["hadoop_http_keytab"],
  88. "foreignKey": null,
  89. "value": "<templateName[0]>",
  90. "filename": "hdfs-site.xml",
  91. "serviceName": "HDFS"
  92. },
  93. {
  94. "name": "dfs.datanode.kerberos.principal",
  95. "templateName": ["datanode_principal_name", "kerberos_domain"],
  96. "foreignKey": null,
  97. "value": "<templateName[0]>@<templateName[1]>",
  98. "filename": "hdfs-site.xml",
  99. "serviceName": "HDFS"
  100. },
  101. {
  102. "name": "dfs.datanode.keytab.file",
  103. "templateName": ["datanode_keytab"],
  104. "foreignKey": null,
  105. "value": "<templateName[0]>",
  106. "filename": "hdfs-site.xml",
  107. "serviceName": "HDFS"
  108. },
  109. {
  110. "name": "dfs.namenode.kerberos.internal.spnego.principal",
  111. "templateName": [],
  112. "foreignKey": null,
  113. "value": "${dfs.web.authentication.kerberos.principal}",
  114. "filename": "hdfs-site.xml",
  115. "serviceName": "HDFS"
  116. },
  117. {
  118. "name": "dfs.secondary.namenode.kerberos.internal.spnego.principal",
  119. "templateName": [],
  120. "foreignKey": null,
  121. "value": "${dfs.web.authentication.kerberos.principal}",
  122. "filename": "hdfs-site.xml",
  123. "serviceName": "HDFS"
  124. },
  125. {
  126. "name": "dfs.journalnode.kerberos.principal",
  127. "templateName": ["journalnode_principal_name", "kerberos_domain"],
  128. "foreignKey": null,
  129. "value": "<templateName[0]>@<templateName[1]>",
  130. "filename": "hdfs-site.xml",
  131. "serviceName": "HDFS"
  132. },
  133. {
  134. "name": "dfs.journalnode.kerberos.internal.spnego.principal",
  135. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  136. "foreignKey": null,
  137. "value": "<templateName[0]>@<templateName[1]>",
  138. "filename": "hdfs-site.xml",
  139. "serviceName": "HDFS"
  140. },
  141. {
  142. "name": "dfs.journalnode.keytab.file",
  143. "templateName": ["journalnode_keytab"],
  144. "foreignKey": null,
  145. "value": "<templateName[0]>",
  146. "filename": "hdfs-site.xml",
  147. "serviceName": "HDFS"
  148. },
  149. {
  150. "name": "dfs.datanode.address",
  151. "templateName": ["dfs_datanode_address"],
  152. "foreignKey": null,
  153. "value": "0.0.0.0:<templateName[0]>",
  154. "nonSecureValue": "0.0.0.0:50010",
  155. "filename": "hdfs-site.xml",
  156. "serviceName": "HDFS"
  157. },
  158. {
  159. "name": "dfs.datanode.http.address",
  160. "templateName": ["dfs_datanode_http_address"],
  161. "foreignKey": null,
  162. "value": "0.0.0.0:<templateName[0]>",
  163. "nonSecureValue": "0.0.0.0:50075",
  164. "filename": "hdfs-site.xml",
  165. "serviceName": "HDFS"
  166. },
  167. {
  168. "name": "mapreduce.jobhistory.principal",
  169. "templateName": ["jobhistory_principal_name", "kerberos_domain"],
  170. "foreignKey": null,
  171. "value": "<templateName[0]>@<templateName[1]>",
  172. "filename": "mapred-site.xml",
  173. "serviceName": "MAPREDUCE2"
  174. },
  175. {
  176. "name": "mapreduce.jobhistory.keytab",
  177. "templateName": ["jobhistory_keytab"],
  178. "foreignKey": null,
  179. "value": "<templateName[0]>",
  180. "filename": "mapred-site.xml",
  181. "serviceName": "MAPREDUCE2"
  182. },
  183. {
  184. "name": "mapreduce.jobhistory.webapp.spnego-principal",
  185. "templateName": ["jobhistory_http_principal_name", "kerberos_domain"],
  186. "foreignKey": null,
  187. "value": "<templateName[0]>@<templateName[1]>",
  188. "filename": "mapred-site.xml",
  189. "serviceName": "MAPREDUCE2"
  190. },
  191. {
  192. "name": "mapreduce.jobhistory.webapp.spnego-keytab-file",
  193. "templateName": ["jobhistory_http_keytab"],
  194. "foreignKey": null,
  195. "value": "<templateName[0]>",
  196. "filename": "mapred-site.xml",
  197. "serviceName": "MAPREDUCE2"
  198. },
  199. {
  200. "name": "yarn.resourcemanager.principal",
  201. "templateName": ["resourcemanager_principal_name", "kerberos_domain"],
  202. "foreignKey": null,
  203. "value": "<templateName[0]>@<templateName[1]>",
  204. "filename": "yarn-site.xml",
  205. "serviceName": "YARN"
  206. },
  207. {
  208. "name": "yarn.resourcemanager.keytab",
  209. "templateName": ["resourcemanager_keytab"],
  210. "foreignKey": null,
  211. "value": "<templateName[0]>",
  212. "filename": "yarn-site.xml",
  213. "serviceName": "YARN"
  214. },
  215. {
  216. "name": "yarn.nodemanager.principal",
  217. "templateName": ["nodemanager_principal_name", "kerberos_domain"],
  218. "foreignKey": null,
  219. "value": "<templateName[0]>@<templateName[1]>",
  220. "filename": "yarn-site.xml",
  221. "serviceName": "YARN"
  222. },
  223. {
  224. "name": "yarn.nodemanager.keytab",
  225. "templateName": ["nodemanager_keytab"],
  226. "foreignKey": null,
  227. "value": "<templateName[0]>",
  228. "filename": "yarn-site.xml",
  229. "serviceName": "YARN"
  230. },
  231. {
  232. "name": "yarn.resourcemanager.webapp.spnego-principal",
  233. "templateName": ["resourcemanager_http_principal_name", "kerberos_domain"],
  234. "foreignKey": null,
  235. "value": "<templateName[0]>@<templateName[1]>",
  236. "filename": "yarn-site.xml",
  237. "serviceName": "YARN"
  238. },
  239. {
  240. "name": "yarn.resourcemanager.webapp.spnego-keytab-file",
  241. "templateName": ["resourcemanager_http_keytab"],
  242. "foreignKey": null,
  243. "value": "<templateName[0]>",
  244. "filename": "yarn-site.xml",
  245. "serviceName": "YARN"
  246. },
  247. {
  248. "name": "yarn.nodemanager.webapp.spnego-principal",
  249. "templateName": ["nodemanager_http_principal_name", "kerberos_domain"],
  250. "foreignKey": null,
  251. "value": "<templateName[0]>@<templateName[1]>",
  252. "filename": "yarn-site.xml",
  253. "serviceName": "YARN"
  254. },
  255. {
  256. "name": "yarn.nodemanager.webapp.spnego-keytab-file",
  257. "templateName": ["nodemanager_http_keytab"],
  258. "foreignKey": null,
  259. "value": "<templateName[0]>",
  260. "filename": "yarn-site.xml",
  261. "serviceName": "YARN"
  262. },
  263. {
  264. "name": "yarn.nodemanager.container-executor.class",
  265. "templateName": ["yarn_nodemanager_container-executor_class"],
  266. "foreignKey": null,
  267. "value": "<templateName[0]>",
  268. "nonSecureValue": "org.apache.hadoop.yarn.server.nodemanager.DefaultContainerExecutor",
  269. "filename": "yarn-site.xml",
  270. "serviceName": "YARN"
  271. },
  272. {
  273. "name": "hbase.master.kerberos.principal",
  274. "templateName": ["hbase_master_principal_name", "kerberos_domain"],
  275. "foreignKey": null,
  276. "value": "<templateName[0]>@<templateName[1]>",
  277. "filename": "hbase-site.xml",
  278. "serviceName": "HBASE"
  279. },
  280. {
  281. "name": "hbase.master.keytab.file",
  282. "templateName": ["hbase_master_keytab"],
  283. "foreignKey": null,
  284. "value": "<templateName[0]>",
  285. "filename": "hbase-site.xml",
  286. "serviceName": "HBASE"
  287. },
  288. {
  289. "name": "hbase.regionserver.kerberos.principal",
  290. "templateName": ["hbase_regionserver_principal_name", "kerberos_domain"],
  291. "foreignKey": null,
  292. "value": "<templateName[0]>@<templateName[1]>",
  293. "filename": "hbase-site.xml",
  294. "serviceName": "HBASE"
  295. },
  296. {
  297. "name": "hbase.regionserver.keytab.file",
  298. "templateName": ["hbase_regionserver_keytab"],
  299. "foreignKey": null,
  300. "value": "<templateName[0]>",
  301. "filename": "hbase-site.xml",
  302. "serviceName": "HBASE"
  303. },
  304. {
  305. "name": "hive.metastore.sasl.enabled",
  306. "templateName": [],
  307. "foreignKey": null,
  308. "value": "true",
  309. "nonSecureValue": "false",
  310. "filename": "hive-site.xml",
  311. "serviceName": "HIVE"
  312. },
  313. {
  314. "name": "hive.security.authorization.enabled",
  315. "templateName": [],
  316. "foreignKey": null,
  317. "value": "true",
  318. "nonSecureValue": "false",
  319. "filename": "hive-site.xml",
  320. "serviceName": "HIVE"
  321. },
  322. {
  323. "name": "hive.server2.authentication",
  324. "templateName": [],
  325. "foreignKey": null,
  326. "value": "KERBEROS",
  327. "nonSecureValue": "NONE",
  328. "filename": "hive-site.xml",
  329. "serviceName": "HIVE"
  330. },
  331. {
  332. "name": "hive.metastore.kerberos.principal",
  333. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  334. "foreignKey": null,
  335. "value": "<templateName[0]>@<templateName[1]>",
  336. "filename": "hive-site.xml",
  337. "serviceName": "HIVE"
  338. },
  339. {
  340. "name": "hive.metastore.kerberos.keytab.file",
  341. "templateName": ["hive_metastore_keytab"],
  342. "foreignKey": null,
  343. "value": "<templateName[0]>",
  344. "filename": "hive-site.xml",
  345. "serviceName": "HIVE"
  346. },
  347. {
  348. "name": "hive.server2.authentication.kerberos.principal",
  349. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  350. "foreignKey": null,
  351. "value": "<templateName[0]>@<templateName[1]>",
  352. "filename": "hive-site.xml",
  353. "serviceName": "HIVE"
  354. },
  355. {
  356. "name": "hive.server2.authentication.kerberos.keytab",
  357. "templateName": ["hive_metastore_keytab"],
  358. "foreignKey": null,
  359. "value": "<templateName[0]>",
  360. "filename": "hive-site.xml",
  361. "serviceName": "HIVE"
  362. },
  363. {
  364. "name": "oozie.service.AuthorizationService.authorization.enabled",
  365. "templateName": [],
  366. "foreignKey": null,
  367. "value": "true",
  368. "filename": "oozie-site.xml",
  369. "serviceName": "OOZIE"
  370. },
  371. {
  372. "name": "oozie.service.HadoopAccessorService.kerberos.enabled",
  373. "templateName": [],
  374. "foreignKey": null,
  375. "value": "true",
  376. "nonSecureValue": "false",
  377. "filename": "oozie-site.xml",
  378. "serviceName": "OOZIE"
  379. },
  380. {
  381. "name": "local.realm",
  382. "templateName": ["kerberos_domain"],
  383. "foreignKey": null,
  384. "value": "<templateName[0]>",
  385. "filename": "oozie-site.xml",
  386. "serviceName": "OOZIE"
  387. },
  388. {
  389. "name": "oozie.service.HadoopAccessorService.keytab.file",
  390. "templateName": ["oozie_keytab"],
  391. "foreignKey": null,
  392. "value": "<templateName[0]>",
  393. "filename": "oozie-site.xml",
  394. "serviceName": "OOZIE"
  395. },
  396. {
  397. "name": "oozie.service.HadoopAccessorService.kerberos.principal",
  398. "templateName": ["oozie_principal_name", "kerberos_domain"],
  399. "foreignKey": null,
  400. "value": "<templateName[0]>@<templateName[1]>",
  401. "filename": "oozie-site.xml",
  402. "serviceName": "OOZIE"
  403. },
  404. {
  405. "name": "oozie.authentication.type",
  406. "templateName": [],
  407. "foreignKey": null,
  408. "value": "kerberos",
  409. "nonSecureValue": "simple",
  410. "filename": "oozie-site.xml",
  411. "serviceName": "OOZIE"
  412. },
  413. {
  414. "name": "oozie.authentication.kerberos.principal",
  415. "templateName": ["oozie_http_principal_name", "kerberos_domain"],
  416. "foreignKey": null,
  417. "value": "<templateName[0]>@<templateName[1]>",
  418. "filename": "oozie-site.xml",
  419. "serviceName": "OOZIE"
  420. },
  421. {
  422. "name": "oozie.authentication.kerberos.keytab",
  423. "templateName": ["oozie_http_keytab"],
  424. "foreignKey": null,
  425. "value": "<templateName[0]>",
  426. "filename": "oozie-site.xml",
  427. "serviceName": "OOZIE"
  428. },
  429. {
  430. "name": "oozie.authentication.kerberos.name.rules",
  431. "templateName": ["resourcemanager_primary_name", "kerberos_domain", "yarn_user", "nodemanager_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_master_primary_name", "hbase_user","hbase_regionserver_primary_name"],
  432. "foreignKey": null,
  433. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nDEFAULT",
  434. "filename": "oozie-site.xml",
  435. "serviceName": "OOZIE",
  436. "dependedServiceName": [{name: "HBASE", replace: "\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/"}]
  437. },
  438. {
  439. "name": "templeton.kerberos.principal",
  440. "templateName": ["webHCat_http_principal_name", "kerberos_domain"],
  441. "foreignKey": null,
  442. "value": "<templateName[0]>@<templateName[1]>",
  443. "filename": "webhcat-site.xml",
  444. "serviceName": "WEBHCAT"
  445. },
  446. {
  447. "name": "templeton.kerberos.keytab",
  448. "templateName": ["webhcat_http_keytab"],
  449. "foreignKey": null,
  450. "value": "<templateName[0]>",
  451. "filename": "webhcat-site.xml",
  452. "serviceName": "WEBHCAT"
  453. },
  454. {
  455. "name": "templeton.kerberos.secret",
  456. "templateName": [""],
  457. "foreignKey": null,
  458. "value": "secret",
  459. "filename": "webhcat-site.xml",
  460. "serviceName": "WEBHCAT"
  461. },
  462. {
  463. "name": "templeton.hive.properties",
  464. "templateName": ["hivemetastore_host","hive_metastore_principal_name","kerberos_domain"],
  465. "foreignKey": null,
  466. "value": "hive.metastore.local=false,hive.metastore.uris=thrift://<templateName[0]>:9083,hive." +
  467. "metastore.sasl.enabled=true,hive.metastore.execute.setugi=true,hive.metastore.warehouse.dir=/apps/hive/warehouse,hive.exec.mode.local.auto=false,hive.metastore.kerberos.principal=<templateName[1]>@<templateName[2]>",
  468. "filename": "webhcat-site.xml",
  469. "serviceName": "WEBHCAT"
  470. },
  471. {
  472. "name": "hbase.coprocessor.master.classes",
  473. "templateName": [],
  474. "foreignKey": null,
  475. "value": "org.apache.hadoop.hbase.security.access.AccessController",
  476. "filename": "hbase-site.xml",
  477. "serviceName": "HBASE"
  478. },
  479. {
  480. "name": "hbase.coprocessor.region.classes",
  481. "templateName": [],
  482. "foreignKey": null,
  483. "value": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController",
  484. "filename": "hbase-site.xml",
  485. "serviceName": "HBASE"
  486. },
  487. {
  488. "name": "hbase.security.authentication",
  489. "templateName": [],
  490. "foreignKey": null,
  491. "value": "kerberos",
  492. "nonSecureValue": "simple",
  493. "filename": "hbase-site.xml",
  494. "serviceName": "HBASE"
  495. },
  496. {
  497. "name": "hbase.security.authorization",
  498. "templateName": [],
  499. "foreignKey": null,
  500. "value": "true",
  501. "nonSecureValue": "false",
  502. "filename": "hbase-site.xml",
  503. "serviceName": "HBASE"
  504. },
  505. {
  506. "name": "hbase.coprocessor.region.classes",
  507. "templateName": [],
  508. "foreignKey": null,
  509. "value": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController",
  510. "filename": "hbase-site.xml"
  511. },
  512. {
  513. "name": "hbase.bulkload.staging.dir",
  514. "templateName": [],
  515. "foreignKey": null,
  516. "value": "/apps/hbase/staging",
  517. "filename": "hbase-site.xml",
  518. "serviceName": "HBASE"
  519. },
  520. {
  521. "name": "zookeeper.znode.parent",
  522. "templateName": [],
  523. "foreignKey": null,
  524. "value": "/hbase-secure",
  525. "nonSecureValue": "/hbase-unsecure",
  526. "filename": "hbase-site.xml",
  527. "serviceName": "HBASE"
  528. },
  529. /***************************************FALCON***********************************************/
  530. {
  531. "name": "*.falcon.authentication.type",
  532. "templateName": [],
  533. "foreignKey": null,
  534. "value": "kerberos",
  535. "nonSecureValue": "simple",
  536. "filename": "falcon-startup.properties.xml",
  537. "serviceName": "FALCON"
  538. },
  539. {
  540. "name": "*.falcon.http.authentication.type",
  541. "templateName": [],
  542. "foreignKey": null,
  543. "value": "kerberos",
  544. "nonSecureValue": "simple",
  545. "filename": "falcon-startup.properties.xml",
  546. "serviceName": "FALCON"
  547. },
  548. {
  549. "name": "*.falcon.service.authentication.kerberos.principal",
  550. "templateName": ["falcon_principal_name", "kerberos_domain"],
  551. "foreignKey": null,
  552. "value": "<templateName[0]>@<templateName[1]>",
  553. "filename": "falcon-startup.properties.xml",
  554. "serviceName": "FALCON"
  555. },
  556. {
  557. "name": "*.falcon.service.authentication.kerberos.keytab",
  558. "templateName": ["falcon_keytab"],
  559. "foreignKey": null,
  560. "value": "<templateName[0]>",
  561. "filename": "falcon-startup.properties.xml",
  562. "serviceName": "FALCON"
  563. },
  564. {
  565. "name": "*.falcon.http.authentication.kerberos.principal",
  566. "templateName": ["falcon_http_principal_name", "kerberos_domain"],
  567. "foreignKey": null,
  568. "value": "<templateName[0]>@<templateName[1]>",
  569. "filename": "falcon-startup.properties.xml",
  570. "serviceName": "FALCON"
  571. },
  572. {
  573. "name": "*.falcon.http.authentication.kerberos.keytab",
  574. "templateName": ["falcon_http_keytab"],
  575. "foreignKey": null,
  576. "value": "<templateName[0]>",
  577. "filename": "falcon-startup.properties.xml",
  578. "serviceName": "FALCON"
  579. },
  580. {
  581. "name": "*.dfs.namenode.kerberos.principal",
  582. "templateName": ["namenode_principal_name_falcon", "kerberos_domain"],
  583. "foreignKey": null,
  584. "value": "<templateName[0]>@<templateName[1]>",
  585. "filename": "falcon-startup.properties.xml",
  586. "serviceName": "FALCON"
  587. },
  588. /******************************************************************************************/
  589. {
  590. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  591. "templateName": ["proxyuser_group"],
  592. "foreignKey": ["hive_metastore_primary_name"],
  593. "value": "<templateName[0]>",
  594. "filename": "core-site.xml",
  595. "serviceName": "HIVE"
  596. },
  597. {
  598. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  599. "templateName": ["hivemetastore_host"],
  600. "foreignKey": ["hive_metastore_primary_name"],
  601. "value": "<templateName[0]>",
  602. "filename": "core-site.xml",
  603. "serviceName": "HIVE"
  604. },
  605. {
  606. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  607. "templateName": ["proxyuser_group"],
  608. "foreignKey": ["oozie_primary_name"],
  609. "value": "<templateName[0]>",
  610. "filename": "core-site.xml",
  611. "serviceName": "OOZIE"
  612. },
  613. {
  614. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  615. "templateName": ["oozieserver_host"],
  616. "foreignKey": ["oozie_primary_name"],
  617. "value": "<templateName[0]>",
  618. "filename": "core-site.xml",
  619. "serviceName": "OOZIE"
  620. },
  621. {
  622. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  623. "templateName": ["proxyuser_group"],
  624. "foreignKey": ["webHCat_http_primary_name"],
  625. "value": "<templateName[0]>",
  626. "filename": "core-site.xml",
  627. "serviceName": "WEBHCAT"
  628. },
  629. {
  630. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  631. "templateName": ["webhcat_server"],
  632. "foreignKey": ["webHCat_http_primary_name"],
  633. "value": "<templateName[0]>",
  634. "filename": "core-site.xml",
  635. "serviceName": "WEBHCAT"
  636. }
  637. ];