Configuring HDFS Services to Use Keytabs
To configure HDFS services to use keytabs:
-
For Datanode
-
Launch a terminal session and log in to the Kubernetes worker node where the HDFS datanode is active.
-
Copy the
http<DATANODE_HOST>.keytab
andhdfs<DATANODE_HOST>.keytab
keytab files from the Windows Active Directory domain controller and paste them in the/opt/arcsight/k8s-hostpath-volume/interset/hdfs/keytabs
directory of the Kubernetes worker node where the HDFS datanode is active, and then rename them ashttp.keytab
andhdfs.keytab
. - Repeat step a and step b for all the HDFS datanodes that are active in the Kubernetes cluster.
-
For all the keytab files present in the HDFS datanodes of the Kubernetes cluster, provide the permissions of the users who have privilege to NFS, and then navigate to the
/opt/arcsight/k8s-hostpath-volume/interset/hdfs/keytabs
directory and set:chmod 600 *
chown UID:GID *For example:
chmod 600 hdfs.keytab
chown 1999:1999 hdfs.keytab
-
-
For Namenode
-
Launch a terminal session and log in to the Kubernetes node where NFS is created.
-
Copy the
http<DATANODE_HOST>.keytab
andhdfs<DATANODE_HOST>.keytab
keytab files from the Windows Active Directory domain controller and paste them in the/opt/arcsight-nfs/arcsight-volume/interset/hdfs/namenode/keytabs
directory of the Kubernetes node where NFS is created, and then rename them ashttp.keytab
andhdfs.keytab
:You must generate the above keytab files for the Kubernetes worker node labeled asintelligence-namenode:yes
. -
Repeat step a and step b for all the namenodes active in the Kubernetes cluster.
-
For all the keytab files present in the HDFS datanodes of the Kubernetes cluster, provide the permissions of the users who have privilege to NFS, and then navigate to the
/opt/arcsight/k8s-hostpath-volume/interset/hdfs/keytabs
directory and set:chmod 600 *
chown UID:GID *For example:
chmod 600 hdfs.keytab
chown 1999:1999 hdfs.keytab
-