secure_mapping.js 31 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004
  1. /**
  2. * Licensed to the Apache Software Foundation (ASF) under one
  3. * or more contributor license agreements. See the NOTICE file
  4. * distributed with this work for additional information
  5. * regarding copyright ownership. The ASF licenses this file
  6. * to you under the Apache License, Version 2.0 (the
  7. * "License"); you may not use this file except in compliance
  8. * with the License. You may obtain a copy of the License at
  9. *
  10. * http://www.apache.org/licenses/LICENSE-2.0
  11. *
  12. * Unless required by applicable law or agreed to in writing, software
  13. * distributed under the License is distributed on an "AS IS" BASIS,
  14. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15. * See the License for the specific language governing permissions and
  16. * limitations under the License.
  17. */
  18. var App = require('app');
  19. // All of the "name" properties have to coincide with how they will appear in the *-site.xml file
  20. // The "template" properties can come from the config properties in site_properties.js or secure_properties.js .
  21. var props = [
  22. {
  23. "name": "hadoop.security.authentication",
  24. "templateName": [],
  25. "foreignKey": null,
  26. "value": "kerberos",
  27. "nonSecureValue": "simple",
  28. "filename": "core-site.xml",
  29. "serviceName": "HDFS"
  30. },
  31. {
  32. "name": "hadoop.security.authorization",
  33. "templateName": [],
  34. "foreignKey": null,
  35. "value": "true",
  36. "nonSecureValue": "false",
  37. "filename": "core-site.xml",
  38. "serviceName": "HDFS"
  39. },
  40. {
  41. "name": "hadoop.security.auth_to_local",
  42. "templateName": ["resourcemanager_primary_name", "kerberos_domain", "yarn_user", "nodemanager_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_master_primary_name", "hbase_user","hbase_regionserver_primary_name","oozie_primary_name","oozie_user","jobhistory_primary_name","mapred_user","journalnode_principal_name","falcon_primary_name","falcon_user"],
  43. "foreignKey": null,
  44. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[10]>@.*<templateName[1]>)s/.*/<templateName[11]>/\nRULE:[2:$1@$0](<templateName[12]>@.*<templateName[1]>)s/.*/<templateName[13]>/\nRULE:[2:$1@$0](<templateName[14]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[15]>@.*<templateName[1]>)s/.*/<templateName[16]>/\nDEFAULT",
  45. "filename": "core-site.xml",
  46. "serviceName": "HDFS",
  47. "dependedServiceName": [{name: "HBASE", replace: "\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/"},{name: "OOZIE",replace: "\nRULE:[2:$1@$0](<templateName[10]>@.*<templateName[1]>)s/.*/<templateName[11]>/"},{name: "MAPREDUCE2",replace: "\nRULE:[2:$1@$0](<templateName[12]>@.*<templateName[1]>)s/.*/<templateName[13]>/"}]
  48. },
  49. {
  50. "name": "dfs.namenode.kerberos.principal",
  51. "templateName": ["namenode_principal_name", "kerberos_domain"],
  52. "foreignKey": null,
  53. "value": "<templateName[0]>@<templateName[1]>",
  54. "filename": "hdfs-site.xml",
  55. "serviceName": "HDFS"
  56. },
  57. {
  58. "name": "dfs.namenode.keytab.file",
  59. "templateName": ["namenode_keytab"],
  60. "foreignKey": null,
  61. "value": "<templateName[0]>",
  62. "filename": "hdfs-site.xml",
  63. "serviceName": "HDFS"
  64. },
  65. {
  66. "name": "dfs.secondary.namenode.kerberos.principal",
  67. "templateName": ["snamenode_principal_name", "kerberos_domain"],
  68. "foreignKey": null,
  69. "value": "<templateName[0]>@<templateName[1]>",
  70. "filename": "hdfs-site.xml",
  71. "serviceName": "HDFS"
  72. },
  73. {
  74. "name": "dfs.secondary.namenode.keytab.file",
  75. "templateName": ["snamenode_keytab"],
  76. "foreignKey": null,
  77. "value": "<templateName[0]>",
  78. "filename": "hdfs-site.xml",
  79. "serviceName": "HDFS"
  80. },
  81. {
  82. "name": "dfs.web.authentication.kerberos.principal",
  83. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  84. "foreignKey": null,
  85. "value": "<templateName[0]>@<templateName[1]>",
  86. "filename": "hdfs-site.xml",
  87. "serviceName": "HDFS"
  88. },
  89. {
  90. "name": "dfs.web.authentication.kerberos.keytab",
  91. "templateName": ["hadoop_http_keytab"],
  92. "foreignKey": null,
  93. "value": "<templateName[0]>",
  94. "filename": "hdfs-site.xml",
  95. "serviceName": "HDFS"
  96. },
  97. {
  98. "name": "dfs.datanode.kerberos.principal",
  99. "templateName": ["datanode_principal_name", "kerberos_domain"],
  100. "foreignKey": null,
  101. "value": "<templateName[0]>@<templateName[1]>",
  102. "filename": "hdfs-site.xml",
  103. "serviceName": "HDFS"
  104. },
  105. {
  106. "name": "dfs.datanode.keytab.file",
  107. "templateName": ["datanode_keytab"],
  108. "foreignKey": null,
  109. "value": "<templateName[0]>",
  110. "filename": "hdfs-site.xml",
  111. "serviceName": "HDFS"
  112. },
  113. {
  114. "name": "dfs.namenode.kerberos.internal.spnego.principal",
  115. "templateName": [],
  116. "foreignKey": null,
  117. "value": "${dfs.web.authentication.kerberos.principal}",
  118. "filename": "hdfs-site.xml",
  119. "serviceName": "HDFS"
  120. },
  121. {
  122. "name": "dfs.secondary.namenode.kerberos.internal.spnego.principal",
  123. "templateName": [],
  124. "foreignKey": null,
  125. "value": "${dfs.web.authentication.kerberos.principal}",
  126. "filename": "hdfs-site.xml",
  127. "serviceName": "HDFS"
  128. },
  129. {
  130. "name": "dfs.journalnode.kerberos.principal",
  131. "templateName": ["journalnode_principal_name", "kerberos_domain"],
  132. "foreignKey": null,
  133. "value": "<templateName[0]>@<templateName[1]>",
  134. "filename": "hdfs-site.xml",
  135. "serviceName": "HDFS"
  136. },
  137. {
  138. "name": "dfs.journalnode.kerberos.internal.spnego.principal",
  139. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  140. "foreignKey": null,
  141. "value": "<templateName[0]>@<templateName[1]>",
  142. "filename": "hdfs-site.xml",
  143. "serviceName": "HDFS"
  144. },
  145. {
  146. "name": "dfs.journalnode.keytab.file",
  147. "templateName": ["journalnode_keytab"],
  148. "foreignKey": null,
  149. "value": "<templateName[0]>",
  150. "filename": "hdfs-site.xml",
  151. "serviceName": "HDFS"
  152. },
  153. {
  154. "name": "dfs.datanode.address",
  155. "templateName": ["dfs_datanode_address"],
  156. "foreignKey": null,
  157. "value": "0.0.0.0:<templateName[0]>",
  158. "nonSecureValue": "0.0.0.0:50010",
  159. "filename": "hdfs-site.xml",
  160. "serviceName": "HDFS"
  161. },
  162. {
  163. "name": "dfs.datanode.http.address",
  164. "templateName": ["dfs_datanode_http_address"],
  165. "foreignKey": null,
  166. "value": "0.0.0.0:<templateName[0]>",
  167. "nonSecureValue": "0.0.0.0:50075",
  168. "filename": "hdfs-site.xml",
  169. "serviceName": "HDFS"
  170. },
  171. {
  172. "name": "mapreduce.jobhistory.principal",
  173. "templateName": ["jobhistory_principal_name", "kerberos_domain"],
  174. "foreignKey": null,
  175. "value": "<templateName[0]>@<templateName[1]>",
  176. "filename": "mapred-site.xml",
  177. "serviceName": "MAPREDUCE2"
  178. },
  179. {
  180. "name": "mapreduce.jobhistory.keytab",
  181. "templateName": ["jobhistory_keytab"],
  182. "foreignKey": null,
  183. "value": "<templateName[0]>",
  184. "filename": "mapred-site.xml",
  185. "serviceName": "MAPREDUCE2"
  186. },
  187. {
  188. "name": "mapreduce.jobhistory.webapp.spnego-principal",
  189. "templateName": ["jobhistory_http_principal_name", "kerberos_domain"],
  190. "foreignKey": null,
  191. "value": "<templateName[0]>@<templateName[1]>",
  192. "filename": "mapred-site.xml",
  193. "serviceName": "MAPREDUCE2"
  194. },
  195. {
  196. "name": "mapreduce.jobhistory.webapp.spnego-keytab-file",
  197. "templateName": ["jobhistory_http_keytab"],
  198. "foreignKey": null,
  199. "value": "<templateName[0]>",
  200. "filename": "mapred-site.xml",
  201. "serviceName": "MAPREDUCE2"
  202. },
  203. {
  204. "name": "yarn.timeline-service.enabled",
  205. "templateName": [],
  206. "foreignKey": null,
  207. "value": "true",
  208. "nonSecureValue": "false",
  209. "filename": "yarn-site.xml",
  210. "serviceName": "YARN"
  211. },
  212. {
  213. "name": "yarn.acl.enable",
  214. "templateName": [],
  215. "foreignKey": null,
  216. "value": "true",
  217. "nonSecureValue": "false",
  218. "filename": "yarn-site.xml",
  219. "serviceName": "YARN"
  220. },
  221. // YARN Timeline Service
  222. // These "http-authentication" properties are supported in HDP Champlain
  223. {
  224. "name": "yarn.timeline-service.principal",
  225. "templateName": ["apptimelineserver_principal_name", "kerberos_domain"],
  226. "foreignKey": null,
  227. "value": "<templateName[0]>@<templateName[1]>",
  228. "filename": "yarn-site.xml",
  229. "serviceName": "YARN"
  230. },
  231. {
  232. "name": "yarn.timeline-service.keytab",
  233. "templateName": ["apptimelineserver_keytab"],
  234. "foreignKey": null,
  235. "value": "<templateName[0]>",
  236. "filename": "yarn-site.xml",
  237. "serviceName": "YARN"
  238. },
  239. {
  240. "name": "yarn.timeline-service.http-authentication.type",
  241. "templateName": [],
  242. "foreignKey": null,
  243. "value": "kerberos",
  244. "filename": "yarn-site.xml",
  245. "serviceName": "YARN"
  246. },
  247. {
  248. "name": "yarn.timeline-service.http-authentication.kerberos.principal",
  249. "templateName": ["apptimelineserver_http_principal_name", "kerberos_domain"],
  250. "foreignKey": null,
  251. "value": "<templateName[0]>@<templateName[1]>",
  252. "filename": "yarn-site.xml",
  253. "serviceName": "YARN"
  254. },
  255. {
  256. "name": "yarn.timeline-service.http-authentication.kerberos.keytab",
  257. "templateName": ["apptimelineserver_http_keytab"],
  258. "foreignKey": null,
  259. "value": "<templateName[0]>",
  260. "filename": "yarn-site.xml",
  261. "serviceName": "YARN"
  262. },
  263. // YARN Resource Manager
  264. {
  265. "name": "yarn.resourcemanager.principal",
  266. "templateName": ["resourcemanager_principal_name", "kerberos_domain"],
  267. "foreignKey": null,
  268. "value": "<templateName[0]>@<templateName[1]>",
  269. "filename": "yarn-site.xml",
  270. "serviceName": "YARN"
  271. },
  272. {
  273. "name": "yarn.resourcemanager.keytab",
  274. "templateName": ["resourcemanager_keytab"],
  275. "foreignKey": null,
  276. "value": "<templateName[0]>",
  277. "filename": "yarn-site.xml",
  278. "serviceName": "YARN"
  279. },
  280. {
  281. "name": "yarn.nodemanager.principal",
  282. "templateName": ["nodemanager_principal_name", "kerberos_domain"],
  283. "foreignKey": null,
  284. "value": "<templateName[0]>@<templateName[1]>",
  285. "filename": "yarn-site.xml",
  286. "serviceName": "YARN"
  287. },
  288. {
  289. "name": "yarn.nodemanager.keytab",
  290. "templateName": ["nodemanager_keytab"],
  291. "foreignKey": null,
  292. "value": "<templateName[0]>",
  293. "filename": "yarn-site.xml",
  294. "serviceName": "YARN"
  295. },
  296. {
  297. "name": "yarn.resourcemanager.webapp.spnego-principal",
  298. "templateName": ["resourcemanager_http_principal_name", "kerberos_domain"],
  299. "foreignKey": null,
  300. "value": "<templateName[0]>@<templateName[1]>",
  301. "filename": "yarn-site.xml",
  302. "serviceName": "YARN"
  303. },
  304. {
  305. "name": "yarn.resourcemanager.webapp.spnego-keytab-file",
  306. "templateName": ["resourcemanager_http_keytab"],
  307. "foreignKey": null,
  308. "value": "<templateName[0]>",
  309. "filename": "yarn-site.xml",
  310. "serviceName": "YARN"
  311. },
  312. {
  313. "name": "yarn.nodemanager.webapp.spnego-principal",
  314. "templateName": ["nodemanager_http_principal_name", "kerberos_domain"],
  315. "foreignKey": null,
  316. "value": "<templateName[0]>@<templateName[1]>",
  317. "filename": "yarn-site.xml",
  318. "serviceName": "YARN"
  319. },
  320. {
  321. "name": "yarn.nodemanager.webapp.spnego-keytab-file",
  322. "templateName": ["nodemanager_http_keytab"],
  323. "foreignKey": null,
  324. "value": "<templateName[0]>",
  325. "filename": "yarn-site.xml",
  326. "serviceName": "YARN"
  327. },
  328. {
  329. "name": "yarn.nodemanager.container-executor.class",
  330. "templateName": ["yarn_nodemanager_container-executor_class"],
  331. "foreignKey": null,
  332. "value": "<templateName[0]>",
  333. "nonSecureValue": "org.apache.hadoop.yarn.server.nodemanager.DefaultContainerExecutor",
  334. "filename": "yarn-site.xml",
  335. "serviceName": "YARN"
  336. },
  337. {
  338. "name": "hbase.master.kerberos.principal",
  339. "templateName": ["hbase_master_principal_name", "kerberos_domain"],
  340. "foreignKey": null,
  341. "value": "<templateName[0]>@<templateName[1]>",
  342. "filename": "hbase-site.xml",
  343. "serviceName": "HBASE"
  344. },
  345. {
  346. "name": "hbase.master.keytab.file",
  347. "templateName": ["hbase_master_keytab"],
  348. "foreignKey": null,
  349. "value": "<templateName[0]>",
  350. "filename": "hbase-site.xml",
  351. "serviceName": "HBASE"
  352. },
  353. {
  354. "name": "hbase.regionserver.kerberos.principal",
  355. "templateName": ["hbase_regionserver_principal_name", "kerberos_domain"],
  356. "foreignKey": null,
  357. "value": "<templateName[0]>@<templateName[1]>",
  358. "filename": "hbase-site.xml",
  359. "serviceName": "HBASE"
  360. },
  361. {
  362. "name": "hbase.regionserver.keytab.file",
  363. "templateName": ["hbase_regionserver_keytab"],
  364. "foreignKey": null,
  365. "value": "<templateName[0]>",
  366. "filename": "hbase-site.xml",
  367. "serviceName": "HBASE"
  368. },
  369. {
  370. "name": "hive.metastore.sasl.enabled",
  371. "templateName": [],
  372. "foreignKey": null,
  373. "value": "true",
  374. "nonSecureValue": "false",
  375. "filename": "hive-site.xml",
  376. "serviceName": "HIVE"
  377. },
  378. {
  379. "name": "hive.security.authorization.enabled",
  380. "templateName": [],
  381. "foreignKey": null,
  382. "value": "true",
  383. "nonSecureValue": "false",
  384. "filename": "hive-site.xml",
  385. "serviceName": "HIVE"
  386. },
  387. {
  388. "name": "hive.server2.authentication",
  389. "templateName": [],
  390. "foreignKey": null,
  391. "value": "KERBEROS",
  392. "nonSecureValue": "NONE",
  393. "filename": "hive-site.xml",
  394. "serviceName": "HIVE"
  395. },
  396. {
  397. "name": "hive.metastore.kerberos.principal",
  398. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  399. "foreignKey": null,
  400. "value": "<templateName[0]>@<templateName[1]>",
  401. "filename": "hive-site.xml",
  402. "serviceName": "HIVE"
  403. },
  404. {
  405. "name": "hive.metastore.kerberos.keytab.file",
  406. "templateName": ["hive_metastore_keytab"],
  407. "foreignKey": null,
  408. "value": "<templateName[0]>",
  409. "filename": "hive-site.xml",
  410. "serviceName": "HIVE"
  411. },
  412. {
  413. "name": "hive.server2.authentication.kerberos.principal",
  414. "templateName": ["hive_metastore_principal_name", "kerberos_domain"],
  415. "foreignKey": null,
  416. "value": "<templateName[0]>@<templateName[1]>",
  417. "filename": "hive-site.xml",
  418. "serviceName": "HIVE"
  419. },
  420. {
  421. "name": "hive.server2.authentication.kerberos.keytab",
  422. "templateName": ["hive_metastore_keytab"],
  423. "foreignKey": null,
  424. "value": "<templateName[0]>",
  425. "filename": "hive-site.xml",
  426. "serviceName": "HIVE"
  427. },
  428. {
  429. "name": "hive.server2.authentication.spnego.principal",
  430. "templateName": ["hive_metastore_http_principal_name", "kerberos_domain"],
  431. "foreignKey": null,
  432. "value": "<templateName[0]>@<templateName[1]>",
  433. "filename": "hive-site.xml",
  434. "serviceName": "HIVE"
  435. },
  436. {
  437. "name": "hive.server2.authentication.spnego.keytab",
  438. "templateName": ["hive_metastore_http_keytab"],
  439. "foreignKey": null,
  440. "value": "<templateName[0]>",
  441. "filename": "hive-site.xml",
  442. "serviceName": "HIVE"
  443. },
  444. {
  445. "name": "oozie.service.AuthorizationService.authorization.enabled",
  446. "templateName": [],
  447. "foreignKey": null,
  448. "value": "true",
  449. "filename": "oozie-site.xml",
  450. "serviceName": "OOZIE"
  451. },
  452. {
  453. "name": "oozie.service.HadoopAccessorService.kerberos.enabled",
  454. "templateName": [],
  455. "foreignKey": null,
  456. "value": "true",
  457. "nonSecureValue": "false",
  458. "filename": "oozie-site.xml",
  459. "serviceName": "OOZIE"
  460. },
  461. {
  462. "name": "local.realm",
  463. "templateName": ["kerberos_domain"],
  464. "foreignKey": null,
  465. "value": "<templateName[0]>",
  466. "filename": "oozie-site.xml",
  467. "serviceName": "OOZIE"
  468. },
  469. {
  470. "name": "oozie.service.HadoopAccessorService.keytab.file",
  471. "templateName": ["oozie_keytab"],
  472. "foreignKey": null,
  473. "value": "<templateName[0]>",
  474. "filename": "oozie-site.xml",
  475. "serviceName": "OOZIE"
  476. },
  477. {
  478. "name": "oozie.service.HadoopAccessorService.kerberos.principal",
  479. "templateName": ["oozie_principal_name", "kerberos_domain"],
  480. "foreignKey": null,
  481. "value": "<templateName[0]>@<templateName[1]>",
  482. "filename": "oozie-site.xml",
  483. "serviceName": "OOZIE"
  484. },
  485. {
  486. "name": "oozie.authentication.type",
  487. "templateName": [],
  488. "foreignKey": null,
  489. "value": "kerberos",
  490. "nonSecureValue": "simple",
  491. "filename": "oozie-site.xml",
  492. "serviceName": "OOZIE"
  493. },
  494. {
  495. "name": "oozie.authentication.kerberos.principal",
  496. "templateName": ["oozie_http_principal_name", "kerberos_domain"],
  497. "foreignKey": null,
  498. "value": "<templateName[0]>@<templateName[1]>",
  499. "filename": "oozie-site.xml",
  500. "serviceName": "OOZIE"
  501. },
  502. {
  503. "name": "oozie.authentication.kerberos.keytab",
  504. "templateName": ["oozie_http_keytab"],
  505. "foreignKey": null,
  506. "value": "<templateName[0]>",
  507. "filename": "oozie-site.xml",
  508. "serviceName": "OOZIE"
  509. },
  510. {
  511. "name": "oozie.authentication.kerberos.name.rules",
  512. "templateName": ["resourcemanager_primary_name", "kerberos_domain", "yarn_user", "nodemanager_primary_name", "namenode_primary_name", "hdfs_user", "datanode_primary_name", "hbase_master_primary_name", "hbase_user","hbase_regionserver_primary_name"],
  513. "foreignKey": null,
  514. "value": "RULE:[2:$1@$0](<templateName[0]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[3]>@.*<templateName[1]>)s/.*/<templateName[2]>/\nRULE:[2:$1@$0](<templateName[4]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[6]>@.*<templateName[1]>)s/.*/<templateName[5]>/\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nDEFAULT",
  515. "filename": "oozie-site.xml",
  516. "serviceName": "OOZIE",
  517. "dependedServiceName": [{name: "HBASE", replace: "\nRULE:[2:$1@$0](<templateName[7]>@.*<templateName[1]>)s/.*/<templateName[8]>/\nRULE:[2:$1@$0](<templateName[9]>@.*<templateName[1]>)s/.*/<templateName[8]>/"}]
  518. },
  519. {
  520. "name": "templeton.kerberos.principal",
  521. "templateName": ["webHCat_http_principal_name", "kerberos_domain"],
  522. "foreignKey": null,
  523. "value": "<templateName[0]>@<templateName[1]>",
  524. "filename": "webhcat-site.xml",
  525. "serviceName": "HIVE"
  526. },
  527. {
  528. "name": "templeton.kerberos.keytab",
  529. "templateName": ["webhcat_http_keytab"],
  530. "foreignKey": null,
  531. "value": "<templateName[0]>",
  532. "filename": "webhcat-site.xml",
  533. "serviceName": "HIVE"
  534. },
  535. {
  536. "name": "templeton.kerberos.secret",
  537. "templateName": [""],
  538. "foreignKey": null,
  539. "value": "secret",
  540. "filename": "webhcat-site.xml",
  541. "serviceName": "HIVE"
  542. },
  543. {
  544. "name": "templeton.hive.properties",
  545. "templateName": ["hive_metastore","hive_metastore_principal_name","kerberos_domain"],
  546. "foreignKey": null,
  547. "value": "hive.metastore.local=false,hive.metastore.uris=<templateName[0]>,hive." +
  548. "metastore.sasl.enabled=true,hive.metastore.execute.setugi=true,hive.metastore.warehouse.dir=/apps/hive/warehouse,hive.exec.mode.local.auto=false,hive.metastore.kerberos.principal=<templateName[1]>@<templateName[2]>",
  549. "filename": "webhcat-site.xml",
  550. "serviceName": "HIVE"
  551. },
  552. {
  553. "name": "hbase.security.authentication",
  554. "templateName": [],
  555. "foreignKey": null,
  556. "value": "kerberos",
  557. "nonSecureValue": "simple",
  558. "filename": "hbase-site.xml",
  559. "serviceName": "HBASE"
  560. },
  561. {
  562. "name": "hbase.security.authorization",
  563. "templateName": [],
  564. "foreignKey": null,
  565. "value": "true",
  566. "nonSecureValue": "false",
  567. "filename": "hbase-site.xml",
  568. "serviceName": "HBASE"
  569. },
  570. {
  571. "name": "hbase.bulkload.staging.dir",
  572. "templateName": [],
  573. "foreignKey": null,
  574. "value": "/apps/hbase/staging",
  575. "filename": "hbase-site.xml",
  576. "serviceName": "HBASE"
  577. },
  578. {
  579. "name": "zookeeper.znode.parent",
  580. "templateName": [],
  581. "foreignKey": null,
  582. "value": "/hbase-secure",
  583. "nonSecureValue": "/hbase-unsecure",
  584. "filename": "hbase-site.xml",
  585. "serviceName": "HBASE"
  586. },
  587. /***************************************FALCON***********************************************/
  588. {
  589. "name": "*.falcon.authentication.type",
  590. "templateName": [],
  591. "foreignKey": null,
  592. "value": "kerberos",
  593. "nonSecureValue": "simple",
  594. "filename": "falcon-startup.properties.xml",
  595. "serviceName": "FALCON"
  596. },
  597. {
  598. "name": "*.falcon.http.authentication.type",
  599. "templateName": [],
  600. "foreignKey": null,
  601. "value": "kerberos",
  602. "nonSecureValue": "simple",
  603. "filename": "falcon-startup.properties.xml",
  604. "serviceName": "FALCON"
  605. },
  606. {
  607. "name": "*.falcon.service.authentication.kerberos.principal",
  608. "templateName": ["falcon_principal_name", "kerberos_domain"],
  609. "foreignKey": null,
  610. "value": "<templateName[0]>@<templateName[1]>",
  611. "filename": "falcon-startup.properties.xml",
  612. "serviceName": "FALCON"
  613. },
  614. {
  615. "name": "*.falcon.service.authentication.kerberos.keytab",
  616. "templateName": ["falcon_keytab"],
  617. "foreignKey": null,
  618. "value": "<templateName[0]>",
  619. "filename": "falcon-startup.properties.xml",
  620. "serviceName": "FALCON"
  621. },
  622. {
  623. "name": "*.falcon.http.authentication.kerberos.principal",
  624. "templateName": ["falcon_http_principal_name", "kerberos_domain"],
  625. "foreignKey": null,
  626. "value": "<templateName[0]>@<templateName[1]>",
  627. "filename": "falcon-startup.properties.xml",
  628. "serviceName": "FALCON"
  629. },
  630. {
  631. "name": "*.falcon.http.authentication.kerberos.keytab",
  632. "templateName": ["falcon_http_keytab"],
  633. "foreignKey": null,
  634. "value": "<templateName[0]>",
  635. "filename": "falcon-startup.properties.xml",
  636. "serviceName": "FALCON"
  637. },
  638. {
  639. "name": "*.dfs.namenode.kerberos.principal",
  640. "templateName": ["namenode_principal_name_falcon", "kerberos_domain"],
  641. "foreignKey": null,
  642. "value": "<templateName[0]>@<templateName[1]>",
  643. "filename": "falcon-startup.properties.xml",
  644. "serviceName": "FALCON"
  645. },
  646. /***************************************KNOX***********************************************/
  647. {
  648. "name": "gateway.hadoop.kerberos.secured",
  649. "templateName": [],
  650. "foreignKey": null,
  651. "value": "true",
  652. "nonSecureValue": "false",
  653. "filename": "gateway-site.xml",
  654. "serviceName": "KNOX"
  655. },
  656. {
  657. "name": "java.security.krb5.conf",
  658. "templateName": [],
  659. "foreignKey": null,
  660. "value": "/etc/krb5.conf",
  661. "filename": "gateway-site.xml",
  662. "serviceName": "KNOX"
  663. },
  664. {
  665. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  666. "templateName": ["proxyuser_group"],
  667. "foreignKey": ["knox_primary_name"],
  668. "value": "<templateName[0]>",
  669. "filename": "core-site.xml",
  670. "serviceName": "KNOX"
  671. },
  672. {
  673. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  674. "templateName": ["knox_gateway_hosts"],
  675. "foreignKey": ["knox_primary_name"],
  676. "value": "<templateName[0]>",
  677. "filename": "core-site.xml",
  678. "serviceName": "KNOX"
  679. },
  680. {
  681. "name": "webhcat.proxyuser.<foreignKey[0]>.groups",
  682. "templateName": ["proxyuser_group"],
  683. "foreignKey": ["knox_primary_name"],
  684. "value": "<templateName[0]>",
  685. "filename": "webhcat-site.xml",
  686. "serviceName": "KNOX"
  687. },
  688. {
  689. "name": "webhcat.proxyuser.<foreignKey[0]>.hosts",
  690. "templateName": ["knox_gateway_hosts"],
  691. "foreignKey": ["knox_primary_name"],
  692. "value": "<templateName[0]>",
  693. "filename": "webhcat-site.xml",
  694. "serviceName": "KNOX"
  695. },
  696. {
  697. "name": "oozie.service.ProxyUserService.proxyuser.<foreignKey[0]>.groups",
  698. "templateName": ["proxyuser_group"],
  699. "foreignKey": ["knox_primary_name"],
  700. "value": "<templateName[0]>",
  701. "filename": "oozie-site.xml",
  702. "serviceName": "KNOX"
  703. },
  704. {
  705. "name": "oozie.service.ProxyUserService.proxyuser.<foreignKey[0]>.hosts",
  706. "templateName": ["knox_gateway_hosts"],
  707. "foreignKey": ["knox_primary_name"],
  708. "value": "<templateName[0]>",
  709. "filename": "oozie-site.xml",
  710. "serviceName": "KNOX"
  711. },
  712. /***************************************core-site***************************************************/
  713. {
  714. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  715. "templateName": ["proxyuser_group"],
  716. "foreignKey": ["hive_metastore_primary_name"],
  717. "value": "<templateName[0]>",
  718. "filename": "core-site.xml",
  719. "serviceName": "HIVE"
  720. },
  721. {
  722. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  723. "templateName": ["hive_metastore"],
  724. "foreignKey": ["hive_metastore_primary_name"],
  725. "value": "<templateName[0]>",
  726. "filename": "core-site.xml",
  727. "serviceName": "HIVE"
  728. },
  729. {
  730. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  731. "templateName": ["proxyuser_group"],
  732. "foreignKey": ["oozie_primary_name"],
  733. "value": "<templateName[0]>",
  734. "filename": "core-site.xml",
  735. "serviceName": "OOZIE"
  736. },
  737. {
  738. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  739. "templateName": ["oozieserver_host"],
  740. "foreignKey": ["oozie_primary_name"],
  741. "value": "<templateName[0]>",
  742. "filename": "core-site.xml",
  743. "serviceName": "OOZIE"
  744. },
  745. {
  746. "name": "hadoop.proxyuser.<foreignKey[0]>.groups",
  747. "templateName": ["proxyuser_group"],
  748. "foreignKey": ["webHCat_http_primary_name"],
  749. "value": "<templateName[0]>",
  750. "filename": "core-site.xml",
  751. "serviceName": "HIVE"
  752. },
  753. {
  754. "name": "hadoop.proxyuser.<foreignKey[0]>.hosts",
  755. "templateName": ["webhcat_server"],
  756. "foreignKey": ["webHCat_http_primary_name"],
  757. "value": "<templateName[0]>",
  758. "filename": "core-site.xml",
  759. "serviceName": "HIVE"
  760. }
  761. ];
  762. var yarn22Mapping = [
  763. {
  764. "name": 'hadoop.http.authentication.kerberos.principal',
  765. "templateName": ["hadoop_http_principal_name", "kerberos_domain"],
  766. "foreignKey": null,
  767. "value": "<templateName[0]>@<templateName[1]>",
  768. "serviceName": "HDFS",
  769. "filename": "core-site.xml"
  770. },
  771. {
  772. "name": 'hadoop.http.authentication.kerberos.keytab',
  773. "foreignKey": null,
  774. "templateName": ["hadoop_http_keytab"],
  775. "value": "<templateName[0]>",
  776. "serviceName": "HDFS",
  777. "filename": "core-site.xml"
  778. },
  779. {
  780. name: 'hadoop.http.authentication.kerberos.name.rules',
  781. templateName: [],
  782. foreignKey: null,
  783. value: "",
  784. "serviceName": "HDFS",
  785. "filename": "core-site.xml"
  786. },
  787. {
  788. "name": 'yarn.timeline-service.http-authentication.signature.secret',
  789. "templateName": [],
  790. "foreignKey": null,
  791. "value": "",
  792. "serviceName": "YARN",
  793. "filename": "yarn-site.xml"
  794. },
  795. {
  796. "name": 'yarn.timeline-service.http-authentication.signature.secret.file',
  797. "value": "",
  798. "templateName": [],
  799. "foreignKey": null,
  800. "serviceName": "YARN",
  801. "filename": "yarn-site.xml"
  802. },
  803. {
  804. "name": 'yarn.timeline-service.http-authentication.signer.secret.provider',
  805. "value": "",
  806. "templateName": [],
  807. "foreignKey": null,
  808. "serviceName": "YARN",
  809. "filename": "yarn-site.xml"
  810. },
  811. {
  812. "name": 'yarn.timeline-service.http-authentication.signer.secret.provider.object',
  813. "value": "",
  814. "templateName": [],
  815. "foreignKey": null,
  816. "serviceName": "YARN",
  817. "filename": "yarn-site.xml"
  818. },
  819. {
  820. "name": 'yarn.timeline-service.http-authentication.token.validity',
  821. "templateName": [],
  822. "foreignKey": null,
  823. "value": "",
  824. "serviceName": "YARN",
  825. "filename": "yarn-site.xml"
  826. },
  827. {
  828. "name": 'yarn.timeline-service.http-authentication.cookie.domain',
  829. "value": "",
  830. "templateName": [],
  831. "foreignKey": null,
  832. "serviceName": "YARN",
  833. "filename": "yarn-site.xml"
  834. },
  835. {
  836. "name": 'yarn.timeline-service.http-authentication.cookie.path',
  837. "value": "",
  838. "templateName": [],
  839. "foreignKey": null,
  840. "serviceName": "YARN",
  841. "filename": "yarn-site.xml"
  842. },
  843. {
  844. "name": 'yarn.timeline-service.http-authentication.simple.anonymous.allowed',
  845. "value": "true",
  846. "templateName": [],
  847. "foreignKey": null,
  848. "serviceName": "YARN",
  849. "filename": "yarn-site.xml"
  850. },
  851. {
  852. "name": 'yarn.timeline-service.http-authentication.proxyusers.*.hosts',
  853. "value": "",
  854. "templateName": [],
  855. "foreignKey": null,
  856. "serviceName": "YARN",
  857. "filename": "yarn-site.xml"
  858. },
  859. {
  860. "name": 'yarn.timeline-service.http-authentication.proxyusers.*.users',
  861. "value": "",
  862. "serviceName": "YARN",
  863. "templateName": [],
  864. "foreignKey": null,
  865. "filename": "yarn-site.xml"
  866. },
  867. {
  868. "name": 'yarn.timeline-service.http-authentication.proxyusers.*.groups',
  869. "value": "",
  870. "templateName": [],
  871. "foreignKey": null,
  872. "serviceName": "YARN",
  873. "filename": "yarn-site.xml"
  874. },
  875. {
  876. "name": 'hadoop.http.filter.initializers',
  877. "value": "",
  878. "templateName": [],
  879. "foreignKey": null,
  880. "serviceName": "HDFS",
  881. "filename": "core-site.xml"
  882. },
  883. {
  884. "name": 'hadoop.http.authentication.type',
  885. "value": "simple",
  886. "templateName": [],
  887. "foreignKey": null,
  888. "serviceName": "HDFS",
  889. "filename": "core-site.xml"
  890. },
  891. {
  892. "name": 'hadoop.http.authentication.signature.secret',
  893. "value": "",
  894. "templateName": [],
  895. "foreignKey": null,
  896. "serviceName": "HDFS",
  897. "filename": "core-site.xml"
  898. },
  899. {
  900. "name": 'hadoop.http.authentication.signature.secret.file',
  901. "value": "",
  902. "templateName": [],
  903. "foreignKey": null,
  904. "serviceName": "HDFS",
  905. "filename": "core-site.xml"
  906. },
  907. {
  908. "name": 'hadoop.http.authentication.signer.secret.provider',
  909. "value": "",
  910. "templateName": [],
  911. "foreignKey": null,
  912. "serviceName": "HDFS",
  913. "filename": "core-site.xml"
  914. },
  915. {
  916. "name": 'hadoop.http.authentication.signer.secret.provider.object',
  917. "value": "",
  918. "templateName": [],
  919. "foreignKey": null,
  920. "serviceName": "HDFS",
  921. "filename": "core-site.xml"
  922. },
  923. {
  924. "name": 'hadoop.http.authentication.token.validity',
  925. "value": "",
  926. "templateName": [],
  927. "foreignKey": null,
  928. "serviceName": "HDFS",
  929. "filename": "core-site.xml"
  930. },
  931. {
  932. "name": 'hadoop.http.authentication.cookie.domain',
  933. "value": "",
  934. "templateName": [],
  935. "foreignKey": null,
  936. "serviceName": "HDFS",
  937. "filename": "core-site.xml"
  938. },
  939. {
  940. "name": 'hadoop.http.authentication.cookie.path',
  941. "value": "",
  942. "templateName": [],
  943. "foreignKey": null,
  944. "serviceName": "HDFS",
  945. "filename": "core-site.xml"
  946. },
  947. {
  948. "name": 'yarn.timeline-service.http-authentication.kerberos.name.rules',
  949. "value": "",
  950. "templateName": [],
  951. "foreignKey": null,
  952. "serviceName": "YARN",
  953. "filename": "yarn-site.xml"
  954. },
  955. {
  956. "name": 'yarn.resourcemanager.proxyusers.*.hosts',
  957. "value": "",
  958. "templateName": [],
  959. "foreignKey": null,
  960. "serviceName": "YARN",
  961. "filename": "yarn-site.xml"
  962. },
  963. {
  964. "name": 'yarn.resourcemanager.proxyusers.*.users',
  965. "value": "",
  966. "templateName": [],
  967. "foreignKey": null,
  968. "serviceName": "YARN",
  969. "filename": "yarn-site.xml"
  970. },
  971. {
  972. "name": 'yarn.resourcemanager.proxyusers.*.groups',
  973. "value": "",
  974. "templateName": [],
  975. "foreignKey": null,
  976. "serviceName": "YARN",
  977. "filename": "yarn-site.xml"
  978. },
  979. {
  980. "name": 'yarn.resourcemanager.proxy-user-privileges.enabled',
  981. "value": "true",
  982. "templateName": [],
  983. "foreignKey": null,
  984. "serviceName": "YARN",
  985. "filename": "yarn-site.xml"
  986. },
  987. {
  988. "name": 'yarn.nodemanager.linux-container-executor.cgroups.mount-path',
  989. "value": "",
  990. "templateName": [],
  991. "foreignKey": null,
  992. "serviceName": "YARN",
  993. "filename": "yarn-site.xml"
  994. }
  995. ];
  996. props.pushObjects(yarn22Mapping);
  997. module.exports = props;