[
https://issues.apache.org/jira/browse/KNOX-976?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16065815#comment-16065815
]
Larry McCay commented on KNOX-976:
----------------------------------
[~jesus.alv] - A couple review comments:
1. I'd like to understand why the service definition for jkg includes policies.
I think that you probably want to use the defaults but perhaps you have some
reason for it.
2. The PassAllHeadersDispatch does not use the typical Hadoop trusted proxy
pattern of asserting the authenticated user identity via a doas param while
authenticating via kerberos as knox. This needs to be clearly documented if
this is indeed your intent. Since I doubt that Jupyter supports the trusted
proxy pattern, I suspect it is.
3. We really could use some method to test that it actually works. I'm not sure
what to do here since we don't typically test with an installed Jupyter
deployment.
4. We need docs for this service in the users guide. Please communicate the
fact that it does not support the trusted proxy pattern and that the user
identity and session is entirely managed by Jupyter and related cookies,
headers, etc.
> Add Jupyter Kernel Gateway Service Definitions
> ----------------------------------------------
>
> Key: KNOX-976
> URL: https://issues.apache.org/jira/browse/KNOX-976
> Project: Apache Knox
> Issue Type: Task
> Reporter: Jesus Alvarez
> Assignee: Jesus Alvarez
> Fix For: 0.13.0
>
> Attachments: jkg-knox.png, KNOX-976.patch
>
>
> Jupyter Kernel Gateway is a web server that provides headless access to
> Jupyter kernels.
> This allows remote Jupyter notebooks to connect to a kernel gateway running
> in an HDP cluster, and spawn the kernel/spark driver on the kernel gateway
> host.
> https://jupyter-kernel-gateway.readthedocs.io/en/latest/
> Jupyter Kernel Gateway uses on HTTP and Websocket, hence dependency link to
> KNOX-776.
> There are other Jupyter ecosystem projects which could highly benefit/use
> Knox in the future, such as Jupyter Hub.
> The layout which we have currently is similar to zeppelinui/zeppelinws:
>
> gateway-service-definitions/src/main/resources/services/jkg/1.1.2/*.xml
> gateway-service-definitions/src/main/resources/services/jkgws/1.1.2/*.xml
> If there is a preferred naming structure for the 2 services please advise
> (Such as
> gateway-service-definitions/src/main/resources/services/jupyterkernelgateway/1.1.2/*.xml
> )
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
