Alex Ang Hock Hee created LIVY-753:
--------------------------------------
Summary: How to submit keytab to kerberoized livy service remotely
Key: LIVY-753
URL: https://issues.apache.org/jira/browse/LIVY-753
Project: Livy
Issue Type: Question
Components: API
Affects Versions: 0.7.0, 0.6.0
Reporter: Alex Ang Hock Hee
I have setup livy in a kerberized environment and have impersonation disabled
(livy.impersonation.enabled = false). I can't use impersonation due to access
issue with the proxy user.
Hence, jobs have to send their principal and keytab using the spark configs
"spark.yarn.principal" and "spark.yarn.keytab". In my testing, I found that
spark.yarn.keytab only accepts local file and the keytab file would need to
reside on the same server as the livy service. However, I would like to allow
remote access to the livy endpoint, which the keytab would then be on a remote
machine.
Hence, I would like to check how to submit the keytab remotely. I have tried
using the files parameter but could not get it to work.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
