You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@bigtop.apache.org by Sergey Soldatov <se...@gmail.com> on 2016/03/28 00:16:54 UTC

secured cluster with docker

Hi guys,
Any hint how to create a secured cluster using vagrant-puppet docker
deployment? Possible someone has a sample?

Thanks,
Sergey

Re: secured cluster with docker

Posted by Olaf Flebbe <of...@oflebbe.de>.

Hi,

There is a lxc kerberos demo deployment I presented last year. http://github.com/oflebbe/inst and presentation
http://events.linuxfoundation.org/sites/events/files/slides/hadoopoflebbe.pdf

We have reengineered the puppet/kerberos integration lately.  That's one of the things I have still to upstream ...

Olaf


> Am 28.03.2016 um 17:56 schrieb Sergey Soldatov <se...@gmail.com>:
> 
> Hi Olaf,
> It would be nice to have full software stack (hadoop, hbase, hive at
> least). I've seen kerberos configuration for puppets modules, but not
> sure how to enable it in docker deployment.
> 
> Thanks,
> Sergey
> 
> On Mon, Mar 28, 2016 at 1:37 AM, Olaf Flebbe <of...@oflebbe.de> wrote:
>> Hi,
>> 
>> What do you understand about a "secured" cluster ? More than "Hadoop in secure mode" with a full software stack enabled securely configured kerberos?
>> 
>> Olaf
>> 
>>> Am 28.03.2016 um 00:16 schrieb Sergey Soldatov <se...@gmail.com>:
>>> 
>>> Hi guys,
>>> Any hint how to create a secured cluster using vagrant-puppet docker
>>> deployment? Possible someone has a sample?
>>> 
>>> Thanks,
>>> Sergey
>>

Re: secured cluster with docker

Posted by Konstantin Boudnik <co...@apache.org>.

I believe docker shouldn't be any different from a normal puppet deployment.
And for that, you should be able to trigger the secured provisioning by simply
setting

  hadoop::hadoop_security_authentication: "kerberos"
  hadoop::kerberos_realm: "your.realm.com"

in the site.yaml file. There could be a few more, just check
    bigtop-deploy/puppet/hieradata/bigtop/cluster.yaml
under "# Kerberos" section

Cos

On Mon, Mar 28, 2016 at 08:56AM, Sergey Soldatov wrote:
> Hi Olaf,
> It would be nice to have full software stack (hadoop, hbase, hive at
> least). I've seen kerberos configuration for puppets modules, but not
> sure how to enable it in docker deployment.
> 
> Thanks,
> Sergey
> 
> On Mon, Mar 28, 2016 at 1:37 AM, Olaf Flebbe <of...@oflebbe.de> wrote:
> > Hi,
> >
> > What do you understand about a "secured" cluster ? More than "Hadoop in secure mode" with a full software stack enabled securely configured kerberos?
> >
> > Olaf
> >
> >> Am 28.03.2016 um 00:16 schrieb Sergey Soldatov <se...@gmail.com>:
> >>
> >> Hi guys,
> >> Any hint how to create a secured cluster using vagrant-puppet docker
> >> deployment? Possible someone has a sample?
> >>
> >> Thanks,
> >> Sergey
> >

Re: secured cluster with docker

Posted by Sergey Soldatov <se...@gmail.com>.

Hi Olaf,
It would be nice to have full software stack (hadoop, hbase, hive at
least). I've seen kerberos configuration for puppets modules, but not
sure how to enable it in docker deployment.

Thanks,
Sergey

On Mon, Mar 28, 2016 at 1:37 AM, Olaf Flebbe <of...@oflebbe.de> wrote:
> Hi,
>
> What do you understand about a "secured" cluster ? More than "Hadoop in secure mode" with a full software stack enabled securely configured kerberos?
>
> Olaf
>
>> Am 28.03.2016 um 00:16 schrieb Sergey Soldatov <se...@gmail.com>:
>>
>> Hi guys,
>> Any hint how to create a secured cluster using vagrant-puppet docker
>> deployment? Possible someone has a sample?
>>
>> Thanks,
>> Sergey
>

Re: secured cluster with docker

Posted by Olaf Flebbe <of...@oflebbe.de>.

Hi,

What do you understand about a "secured" cluster ? More than "Hadoop in secure mode" with a full software stack enabled securely configured kerberos?

Olaf

> Am 28.03.2016 um 00:16 schrieb Sergey Soldatov <se...@gmail.com>:
> 
> Hi guys,
> Any hint how to create a secured cluster using vagrant-puppet docker
> deployment? Possible someone has a sample?
> 
> Thanks,
> Sergey