[KNOX-1025] Topology Domain Mapping

• Type: New Feature
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Component/s: Server
• Assignee: Benjamin Tan
• Reporter: Benjamin Tan
• Created: 06/Sep/17 09:38
• Updated: 30/Nov/21 08:06

Description

Motivation

In a multi-tenant doployment, end user need to access hadoop service in:

https://{gateway-host}:8443/gateway/eerie/webhdfs 

, even with KIP-6 Topology Port Mapping, end user need to access in:

https://{gateway-host}:5443/webhdfs

we can give more convenience for end user, let them access in:

https://{eerie-specific-domain}/webhdfs
or
https://eerie.{gateway-domain}/webhdfs

There are some deploy prerequisites:

1. Let tenant admin add CNAME topology-specific-domain in their DNS server, point gateway host;
2. add CNAME eerie.gateway-domain in gateway domain DNS server, point geteway host;
3. add firewall rule in gateway host and redirect 443 to knox listening port 8443.

Configuration

Configuration for this feature will be in gateway-site.xml config file.

<!-- Optional, true by default-->
<property>
    <name>gateway.domain.mapping.enabled</name>
    <value>true</value>
    <description>Enable/Disable gateway topology domain mapping feature.</description>
</property>
 
<!-- Multi Domain Gateway -->
<property>
    <name>gateway.domain.mapping.eerie</name>
    <value>{eerie-specific-domain}</value>
    <description>The domain for the Topology.</description>
</property>

Issue Links

• links to: GitHub Pull Request #10