Skip to content

Commit 97ea405

Browse files
Malewaresbernauer
andauthored
Add suggestions
Co-authored-by: Sebastian Bernauer <sebastian.bernauer@stackable.de>
1 parent 8d8db26 commit 97ea405

1 file changed

Lines changed: 9 additions & 8 deletions

File tree

  • docs/modules/hbase/pages/troubleshooting

docs/modules/hbase/pages/troubleshooting/index.adoc

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,19 @@
11
= Troubleshooting
22

3-
== Hbase access with kerberos authentication
3+
== HBase access with Kerberos authentication
44

5-
Currently, xref:zookeeper:index.adoc[Zookeeper] is not secured with authentication. This means, if an application tries to connect to Hbase, it would ask the zookeeper quorum to figure the correct nodes to talk to. In a Java world, you would define a `Client` which would carry the kerberos requirements.
5+
Currently, xref:zookeeper:index.adoc[Zookeeper] stacklets can only be secured using mutual TLS.
6+
This means, if an application tries to connect to HBase, it would contact Zookeeper to figure the correct HBase nodes to talk to.
7+
In a Java world, you would define a `Client` which would carry the Kerberos requirements.
68

7-
However, those requirements might be passed through and thus your client ( e.g. xref:spark-k8s:usage-guide:operations:applications.adoc[SparkApplications] ) would try to authenticate with kerberos at the corresponding Zookeeper endpoint. This will result in a kerberos ( authentication ) error.
9+
However, those requirements might be passed through and thus your client (e.g. xref:spark-k8s:usage-guide:operations:applications.adoc[SparkApplications]) would try to authenticate with Kerberos at the corresponding Zookeeper endpoint.
10+
This will result in a Kerberos ( authentication ) error.
811

9-
To prevent this, you can set a jvm argument like ( again e.g. SparkApplications )
12+
To prevent this, you can set a JVM argument like this (again e.g. SparkApplications) in all Pods which would like to talk to HBase:
1013

1114
[source,yaml]
1215
----
1316
jvmArgumentOverrides:
14-
add:
15-
- "-Dzookeeper.sasl.client=false"
17+
add:
18+
- "-Dzookeeper.sasl.client=false"
1619
----
17-
18-
in all pods which would like to talk to Hbase.

0 commit comments

Comments
 (0)