Wei-Chiu Chuang created HDDS-14489:
--------------------------------------

             Summary: [Website v2] [Docs] [Administrator Guide] Kerberize an 
existing cluster
                 Key: HDDS-14489
                 URL: https://issues.apache.org/jira/browse/HDDS-14489
             Project: Apache Ozone
          Issue Type: Sub-task
          Components: documentation
            Reporter: Wei-Chiu Chuang


Let's add a page for the instructions to convert a non-Kerberos cluster into a 
Kerberos cluster ('kerberize')

This page is going to be named "Kerberize an existing cluster" under 
Administrator Guide -> Operations 
https://ozone-site-v2.staged.apache.org/docs/administrator-guide/operations/

https://github.com/apache/ozone/discussions/9026#discussioncomment-15225665

# Shut down the whole thing, update the configs to enable Kerberos and have the 
correct keytabs in place.
# Start primordial SCM first -> it generates all required CA and sub-CA certs 
in its metadata folders.
# Copy them to the corresponding places for non-primordial SCMs
# Start other SCMs as usual.

this is a high level sketch. Probably need a more prescriptive writeup though.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to