[jira] [Work logged] (KNOX-1025) Topology Domain Mapping

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KNOX-1025?focusedWorklogId=687814&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-687814 ]

ASF GitHub Bot logged work on KNOX-1025:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 30/Nov/21 08:06
            Start Date: 30/Nov/21 08:06
    Worklog Time Spent: 10m 
      Work Description: smolnar82 closed pull request #10:
URL: https://github.com/apache/knox/pull/10


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 687814)
    Remaining Estimate: 0h
            Time Spent: 10m

> Topology Domain Mapping
> -----------------------
>
>                 Key: KNOX-1025
>                 URL: https://issues.apache.org/jira/browse/KNOX-1025
>             Project: Apache Knox
>          Issue Type: New Feature
>          Components: Server
>            Reporter: Benjamin Tan
>            Assignee: Benjamin Tan
>            Priority: Major
>         Attachments: knox-1025.patch, knox-1025.v2.patch
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> h2. Motivation
> In a multi-tenant doployment, end user need to access hadoop service in:
> {code:java}
> https://{gateway-host}:8443/gateway/eerie/webhdfs 
> {code}
> , even with [KIP-6 Topology Port Mapping|https://cwiki.apache.org/confluence/display/KNOX/KIP-6+Topology+Port+Mapping], end user need to access in:
> {code:java}
> https://{gateway-host}:5443/webhdfs
> {code}
> we can give more convenience for end user, let them access in:
> {code:java}
> https://{eerie-specific-domain}/webhdfs
> or
> https://eerie.{gateway-domain}/webhdfs
> {code}
> There are some deploy prerequisites:
> # Let tenant admin add CNAME topology-specific-domain in their DNS server, point gateway host;
> # add CNAME eerie.gateway-domain in gateway domain DNS server, point geteway host;
> # add firewall rule in gateway host and redirect 443 to knox listening port 8443.
> h2. Configuration
> Configuration for this feature will be in gateway-site.xml config file.
> {code:java}
> <!-- Optional, true by default-->
> <property>
>     <name>gateway.domain.mapping.enabled</name>
>     <value>true</value>
>     <description>Enable/Disable gateway topology domain mapping feature.</description>
> </property>
>  
> <!-- Multi Domain Gateway -->
> <property>
>     <name>gateway.domain.mapping.eerie</name>
>     <value>{eerie-specific-domain}</value>
>     <description>The domain for the Topology.</description>
> </property>
> {code}



--
This message was sent by Atlassian Jira
(v8.20.1#820001)