AMBARI-20094: Zeppelin should configure hadoop.proxyuser in HDFS core-site.xml (Prabhjyot Singh vi r-kamath)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/df60905a Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/df60905a Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/df60905a Branch: refs/heads/branch-feature-AMBARI-12556 Commit: df60905a5508036e821deab4b6cd96a038a042ae Parents: 04039a6 Author: Renjith Kamath <[email protected]> Authored: Wed Mar 1 12:34:07 2017 +0530 Committer: Renjith Kamath <[email protected]> Committed: Wed Mar 1 12:34:57 2017 +0530 ---------------------------------------------------------------------- .../ZEPPELIN/0.6.0.2.5/kerberos.json | 8 +++ .../HDP/2.5/services/ZEPPELIN/kerberos.json | 53 ++++++++++++++++++++ .../HDP/2.6/services/ZEPPELIN/kerberos.json | 53 ++++++++++++++++++++ 3 files changed, 114 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/df60905a/ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json b/ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json index 5625681..925215b 100644 --- a/ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json +++ b/ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json @@ -38,6 +38,14 @@ "zeppelin-env": { "zeppelin.kerberos.enabled": "true" } + }, + { + "core-site": { + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}.groups": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}.hosts": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}-${cluster_name|toLower()}.groups": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}-${cluster_name|toLower()}.hosts": "*" + } } ] } http://git-wip-us.apache.org/repos/asf/ambari/blob/df60905a/ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json b/ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json new file mode 100644 index 0000000..925215b --- /dev/null +++ b/ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json @@ -0,0 +1,53 @@ +{ + "services": [ + { + "name": "ZEPPELIN", + "identities": [ + { + "name": "/smokeuser" + }, + { + "name": "zeppelin_user", + "principal": { + "value": "${zeppelin-env/zeppelin_user}${principal_suffix}@${realm}", + "type" : "user", + "configuration": "zeppelin-env/zeppelin.server.kerberos.principal", + "local_username" : "${zeppelin-env/zeppelin_user}" + }, + "keytab": { + "file": "${keytab_dir}/zeppelin.server.kerberos.keytab", + "owner": { + "name": "${zeppelin-env/zeppelin_user}", + "access": "r" + }, + "group": { + "name": "${cluster-env/user_group}", + "access": "" + }, + "configuration": "zeppelin-env/zeppelin.server.kerberos.keytab" + } + } + ], + "components": [ + { + "name": "ZEPPELIN_MASTER" + } + ], + "configurations": [ + { + "zeppelin-env": { + "zeppelin.kerberos.enabled": "true" + } + }, + { + "core-site": { + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}.groups": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}.hosts": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}-${cluster_name|toLower()}.groups": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}-${cluster_name|toLower()}.hosts": "*" + } + } + ] + } + ] +} http://git-wip-us.apache.org/repos/asf/ambari/blob/df60905a/ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json b/ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json new file mode 100644 index 0000000..925215b --- /dev/null +++ b/ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json @@ -0,0 +1,53 @@ +{ + "services": [ + { + "name": "ZEPPELIN", + "identities": [ + { + "name": "/smokeuser" + }, + { + "name": "zeppelin_user", + "principal": { + "value": "${zeppelin-env/zeppelin_user}${principal_suffix}@${realm}", + "type" : "user", + "configuration": "zeppelin-env/zeppelin.server.kerberos.principal", + "local_username" : "${zeppelin-env/zeppelin_user}" + }, + "keytab": { + "file": "${keytab_dir}/zeppelin.server.kerberos.keytab", + "owner": { + "name": "${zeppelin-env/zeppelin_user}", + "access": "r" + }, + "group": { + "name": "${cluster-env/user_group}", + "access": "" + }, + "configuration": "zeppelin-env/zeppelin.server.kerberos.keytab" + } + } + ], + "components": [ + { + "name": "ZEPPELIN_MASTER" + } + ], + "configurations": [ + { + "zeppelin-env": { + "zeppelin.kerberos.enabled": "true" + } + }, + { + "core-site": { + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}.groups": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}.hosts": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}-${cluster_name|toLower()}.groups": "*", + "hadoop.proxyuser.${zeppelin-env/zeppelin_user}-${cluster_name|toLower()}.hosts": "*" + } + } + ] + } + ] +}
