[ https://issues.apache.org/jira/browse/AMBARI-23930?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16487977#comment-16487977 ]
Hudson commented on AMBARI-23930: --------------------------------- SUCCESS: Integrated in Jenkins build Ambari-trunk-Commit #9325 (See [https://builds.apache.org/job/Ambari-trunk-Commit/9325/]) [AMBARI-23930]q - Provide a Framework For Regenerating Keytabs During (github: [https://gitbox.apache.org/repos/asf?p=ambari.git&a=commit&h=7b3aca83483cbc3cad777ba2eadf7015c1234d0d]) * (edit) ambari-server/src/main/java/org/apache/ambari/server/state/stack/upgrade/StageWrapper.java * (add) ambari-server/src/test/python/stacks/2.0.6/hooks/before-SET_KEYTAB/test_before_set_keytab.py * (edit) ambari-server/src/main/java/org/apache/ambari/server/stack/MasterHostResolver.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/AddComponentAction.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/stack/HostsType.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/controller/internal/UpgradeResourceProvider.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/state/stack/upgrade/Grouping.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java * (edit) ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java * (edit) ambari-server/src/test/python/stacks/2.2/KERBEROS/test_kerberos_client.py * (add) ambari-server/src/main/java/org/apache/ambari/server/state/stack/upgrade/RegenerateKeytabsTask.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java * (add) ambari-server/src/test/resources/stacks/HDP/2.1.1/upgrades/upgrade_test_regenerate_keytabs.xml * (edit) ambari-server/src/main/java/org/apache/ambari/server/state/stack/upgrade/ClusterGrouping.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/state/stack/upgrade/Task.java * (edit) ambari-server/src/main/java/org/apache/ambari/server/state/stack/upgrade/TaskWrapper.java * (add) ambari-server/src/main/resources/stack-hooks/before-SET_KEYTAB/scripts/hook.py * (edit) ambari-server/src/main/resources/upgrade-pack.xsd * (edit) ambari-server/src/test/java/org/apache/ambari/server/controller/internal/UpgradeResourceProviderTest.java > Provide a Framework For Regenerating Keytabs During Upgrade > ----------------------------------------------------------- > > Key: AMBARI-23930 > URL: https://issues.apache.org/jira/browse/AMBARI-23930 > Project: Ambari > Issue Type: Bug > Affects Versions: 2.7.0 > Reporter: Jonathan Hurley > Assignee: Jonathan Hurley > Priority: Blocker > Labels: pull-request-available > Fix For: 2.7.0 > > Time Spent: 1h > Remaining Estimate: 0h > > There have been cases in the past where a manual step required after > performing a stack upgrade was to regenerate keytabs. This was necessary for > a variety of reasons, but it wasn't problematic enough to warrant Ambari > doing this as part of an upgrade. > With the stack upgrade from HDP 2.6 to 3.0, 2 new components are added: > Registry DNS and ATR. If the cluster is kerberized, these new components > won't start until keytabs have been generated for them. > The follow will be able to be added to an upgrade pack in order to instruct > the upgrade to regenerate missing keytabs for the new components: > {code} > <group xsi:type="cluster" name="REGENERATE_KEYTABS" title="Regenerate > Missing Keytabs"> > <condition xsi:type="security" type="kerberos"/> > <direction>UPGRADE</direction> > <execute-stage title="Regenerate Missing Keytabs"> > <task xsi:type="regenerate_keytabs"/> > </execute-stage> > </group> > {code} > A credential store will need to be setup before hand so that the kerberos > credentials are available when this step in the upgrade runs. -- This message was sent by Atlassian JIRA (v7.6.3#76005)