[jira] [Comment Edited] (HADOOP-8581) add support for HTTPS to the web UIs

["Suresh Srinivas (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-8581?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13786567#comment-13786567 ] 

Suresh Srinivas edited comment on HADOOP-8581 at 10/4/13 8:13 PM:
------------------------------------------------------------------

I spoke to [~tucu00]. Here is the summary (tucu correct me if I missed any thing):

Decisions:
- Add support SSL per project instead of a single global configuration
- Add support HTTP_ONLY, HTTPS_ONLY, HTTP_AND_HTTPS Policies

Proposed changes:
# YARN and Job history server will have <project>.http.policy. This can be set to HTTP_ONLY or HTTPS_ONLY.
# HDFS will have hdfs.http.policy. This can be set to HTTP_ONLY, HTTPS_ONLY, and HTTP_AND_HTTPS
# hadoop.ssl.enable will be deprecated.
# When new configuration options are used, the old configurations are ignored with a warning.

Migration paths:
# HDFS: for installations using hadoop.https.enable=true, the configuration will be mapped to hdfs.http.policy=HTTP_AND_HTTPS.
# Installations using hadoop.ssl.enabled=true: this will map to across the project to the policy HTTPS_ONLY. One incompatibility for such installations is, configured https port will be used for namenode and datanode, instead of configured http port where currently https is started.

Future:
- Add support for all the policies for YARN, Job history server, AM, and HDFS.



was (Author: sureshms):
I spoke to [~tucu00]. Here is the summary (tucu correct me if I missed any thing):

Decisions:
- Add support SSL per project instead of a single global configuration
- Add support HTTP_ONLY, HTTPS_ONLY, HTTP_AND_HTTPS Policies

Proposed changes:
# YARN and Job history server will have <project>.http.policy. This can be set to HTTP_ONLY or HTTPS_ONLY.
# HDFS will have hdfs.http.policy. This can be set to HTTP_ONLY, HTTPS_ONLY, and HTTP_AND_HTTPS
# hadoop.ssl.enable will be deprecated.
# When new configuration options are used, the old configurations are ignored with a warning.

Migration paths:
# HDFS: for installations using hadoop.https.enable=true, the configuration will be mapped to hdfs.http.policy=HTTP_AND_HTTPS.
# Installations using hadoop.ssl.enabled=true: this will map to across the project to the policy HTTPS_ONLY.

Future:
- Add support for all the policies for YARN, Job history server, AM, and HDFS.


> add support for HTTPS to the web UIs
> ------------------------------------
>
>                 Key: HADOOP-8581
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8581
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: security
>    Affects Versions: 2.0.0-alpha
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>             Fix For: 2.0.2-alpha
>
>         Attachments: HADOOP-8581.patch, HADOOP-8581.patch, HADOOP-8581.patch, HADOOP-8581.patch, HADOOP-8581.patch, HADOOP-8581.patch, HADOOP-8581.patch
>
>
> HDFS/MR web UIs don't work over HTTPS, there are places where 'http://' is hardcoded.



--
This message was sent by Atlassian JIRA
(v6.1#6144)