HDFS Federation and HTTP Kerberos Properties

[Grant Langlois <gr...@gmail.com>]

Hello,

While implementing a secure HDFS setup with federation, I was reviewing the
NameNode properties which are allowed to be set on a per nameservice basis.
Omitted from those properties were the
dfs.web.authentication.kerberos.principal and
dfs.web.authentication.kerberos.keytab properties.

Is there a technical reason that these are to be common across all
NameNodes or is it just that this hasn't been a requested feature yet? In
our case we're using federation to achieve isolation, so I feel it would
make sense to want to separate the kerberos credentials on a per NameNode
basis for the HTTP server as well.

Kind Regards,

Grant