----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/43465/#review118794 -----------------------------------------------------------
ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json (lines 5 - 8) <https://reviews.apache.org/r/43465/#comment180095> Is this identity used by both the `HAWKMASTER` and `HAWQSTANDBY` components? If not, this block should be moved into the appropriate component since we want to use it sparingly. Esentially the `/HDFS/NAMENODE/hdfs` is the _root_ user for HDFS. So we need to becareful where it gets put. ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json (lines 27 - 44) <https://reviews.apache.org/r/43465/#comment180096> This identitiy seems to be duplicated in both components. You should probably move this to the service level and reference it in the component if component-specific changes need to be made. ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json (line 31) <https://reviews.apache.org/r/43465/#comment180097> This is an interesting principal name choice. Why not use a principal name that helps to identify is use. Like, `hawq@${realm}` or better yet something like `${hawq-env/hawk_user}@${realm}`. - Robert Levas On Feb. 10, 2016, 8 p.m., jun aoki wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/43465/ > ----------------------------------------------------------- > > (Updated Feb. 10, 2016, 8 p.m.) > > > Review request for Ambari. > > > Bugs: AMBARI-15001 > https://issues.apache.org/jira/browse/AMBARI-15001 > > > Repository: ambari > > > Description > ------- > > This is to add hdfs keytab for hawq nodes. > Currently HAWQ's service check fails due to data clean up after service check > is completed and causes a false negative. > > > Diffs > ----- > > ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json > cc11c15 > > Diff: https://reviews.apache.org/r/43465/diff/ > > > Testing > ------- > > Locally teted. > > > Thanks, > > jun aoki > >
