[
https://issues.apache.org/jira/browse/AMBARI-16437?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-16437:
----------------------------------
Attachment: AMBARI-16437_trunk_02.patch
> Add conditional constraints for Kerberos identities to control when they are
> created
> ------------------------------------------------------------------------------------
>
> Key: AMBARI-16437
> URL: https://issues.apache.org/jira/browse/AMBARI-16437
> Project: Ambari
> Issue Type: Task
> Components: ambari-server
> Affects Versions: 2.4.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Labels: kerberos, kerberos_descriptor
> Fix For: 2.4.0
>
> Attachments: AMBARI-16437_trunk_01.patch, AMBARI-16437_trunk_02.patch
>
>
> Add conditional constraints for Kerberos identities to control when they are
> created. For example if Kerberos Identity should only be created (and
> distributed) for a component when some other component or service is
> installed.
> An example of this would be
> {code}
> {
> "name": "/HIVE/HIVE_SERVER/hive_server_hive",
> "principal": {
> "configuration":
> "hive-interactive-site/hive.llap.daemon.service.principal"
> },
> "keytab": {
> "configuration": "hive-interactive-site/hive.llap.daemon.keytab.file"
> },
> "when" : {
> "contains" : ["services", "HIVE"]
> }
> }
> {code}
> Note the "{{when}}" clause. This indicates that this identity should only be
> processed when the set of services contains "HIVE". An alternative to this
> would be to test the set of components for a certain component.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
