[AMBARI-18888] Ambari-agent: Create configuration files with JCEKS information

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: ambari-agent
• Assignee: Nahappan Somasundaram
• Reporter: Nahappan Somasundaram
• Created: 14/Nov/16 23:22
• Updated: 09/Dec/16 16:17
• Resolved: 09/Dec/16 16:02

Description

When a non-status command is received, a command.json file is generated. This file contains the passwords used in a configuration. When the command is then executed, ambari agent spawns off a subprocess to execute component-specific Python scripts to generate the configuration files using the data from the command.json file.

To avoid storing clear text passwords in command.json file and configuration files, ambari-agent will first generate the JCEKS files corresponding to the configuration information in the command JSON blob coming from the server and then generate the command.json with the path to the JCEKS store instead of clear text passwords for password properties.

Subsequently when executing a command, ambari-agent will generate the configuration files with the JCEKS path information from command.json.

Issue Links

• links to: Review Board