You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Wei-Chiu Chuang (Jira)" <ji...@apache.org> on 2026/01/23 02:08:00 UTC

[jira] [Created] (HDDS-14489) [Website v2] [Docs] [Administrator Guide] Kerberize an existing cluster

Wei-Chiu Chuang created HDDS-14489:
--------------------------------------

             Summary: [Website v2] [Docs] [Administrator Guide] Kerberize an existing cluster
                 Key: HDDS-14489
                 URL: https://issues.apache.org/jira/browse/HDDS-14489
             Project: Apache Ozone
          Issue Type: Sub-task
          Components: documentation
            Reporter: Wei-Chiu Chuang


Let's add a page for the instructions to convert a non-Kerberos cluster into a Kerberos cluster ('kerberize')

This page is going to be named "Kerberize an existing cluster" under Administrator Guide -> Operations https://ozone-site-v2.staged.apache.org/docs/administrator-guide/operations/

https://github.com/apache/ozone/discussions/9026#discussioncomment-15225665

# Shut down the whole thing, update the configs to enable Kerberos and have the correct keytabs in place.
# Start primordial SCM first -> it generates all required CA and sub-CA certs in its metadata folders.
# Copy them to the corresponding places for non-primordial SCMs
# Start other SCMs as usual.

this is a high level sketch. Probably need a more prescriptive writeup though.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org