[AMBARI-17988] Allow multiple configurations for a Kerberos identity principal and keytab definition

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Won't Fix
• Affects Version/s: 2.4.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Labels: kerberos_descriptor
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 02/Aug/16 11:22
• Updated: 02/Aug/16 18:52
• Resolved: 02/Aug/16 18:52

Description

Allow multiple configurations for a Kerberos identity principal and keytab definition.

Currently we allow:

{
              "name": "some_name",
              "principal": {
                "value": "foobar/_HOST@${realm}",
                "type" : "service",
                "configuration": "config1/property1",
                "local_username" : "${hadoop-env/hdfs_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/foobar.service.keytab",
                "owner": {
                  "name": "${config-env/foobar_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "config1/property2"
              }
            },

but we should allow for

{
              "name": "some_name",
              "principal": {
                "value": "foobar/_HOST@${realm}",
                "type" : "service",
                "configurations": ["config1/property1", "config2/propertyA"],
                "local_username" : "${hadoop-env/hdfs_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/foobar.service.keytab",
                "owner": {
                  "name": "${config-env/foobar_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configurations":[ "config1/property2",  "config2/propertyB"]
              }
            },