ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <>
Subject [jira] [Commented] (AMBARI-13712) Blueprints: Support for Blueprint export of a running Kerberized Cluster
Date Fri, 06 Nov 2015 02:17:27 GMT


Hudson commented on AMBARI-13712:

FAILURE: Integrated in Ambari-branch-2.1 #808 (See [])
AMBARI-13712. Support for Blueprint export of a running Kerberized (rnettleton: [])
* ambari-server/src/main/java/org/apache/ambari/server/controller/internal/
* ambari-server/src/test/java/org/apache/ambari/server/controller/internal/
* ambari-server/src/test/java/org/apache/ambari/server/api/query/render/
* ambari-server/src/main/java/org/apache/ambari/server/api/query/render/

> Blueprints: Support for Blueprint export of a running Kerberized Cluster
> ------------------------------------------------------------------------
>                 Key: AMBARI-13712
>                 URL:
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>            Reporter: Sandor Magyari
>            Assignee: Sandor Magyari
>             Fix For: 2.1.3
>         Attachments: AMBARI-13712.patch
> This task involves implementing the support for exporting a Blueprint from a Kerberized
cluster, and having this document contain everything necessary to re-create this Kerberized
cluster with new hardware.
> An exported Blueprint for a Kerberized cluster will need to contain:
> The existing component and configuration for the cluster (this can remain as it currently
is, no changes required)
> The “kerberos-env” and “k2b5-conf” configuration types. This will largely occur
automatically, since these types are just plain configuration types on the cluster, and will
be exported along with the other config types. Note: There will be some work required here
in order to make sure that hostnames and passwords are not included in the exported Blueprint.
The BlueprintConfigurationProcessor will need to be updated to properly mask out the hostnames/passwords.
This is similar to existing config type handling, and will be a relatively small amount of
> The Kerberos state of the cluster. The Blueprint processor will need to query the “KerberosHelper”
API to determine if a cluster is Kerberized. If Kerberos is enabled, then the Blueprint processor
will use the same API to obtain the Kerberos descriptor associated with this cluster (found
as a REST resource under /api/v1/clusters/cluster_name/artifacts/kerberos_descriptor). This
Kerberos descriptor should be added to the exported Blueprint, as an embedded descriptor inside
the Blueprint .json file.
> We should be able to export a Blueprint from a Kerberized cluster regardless of the initial
deployment type (Ambari UI used to create cluster vs. Blueprint deployment used to create

This message was sent by Atlassian JIRA

View raw message