[AMBARI-8277] Create facility to get and set kerberos plans via REST API

• Type: New Feature
• Status: Resolved
• Priority: Blocker
• Resolution: Duplicate
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: ambari-server
• Labels: api kerberos kerberos_plan resource
• Epic Link: Ambari Automated Kerberization
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 11/Nov/14 15:34
• Updated: 23/Jan/15 11:26
• Resolved: 23/Jan/15 11:26

Description

To help with kerberizing a cluster, a Kerberos Plan may be used set relevant security properties for a service.

A Kerberos Plan is essentially composite Kerberos Descriptor consisting of details for an entire cluster (as opposed to just a single service). The details that a Kerberos Plan encapsulates are as follows:

• Cluster-wide Kerberos Identities
• Cluster-wide Kerberos-related configurations
• Service-specific Kerberos Identities
• Service-specific Kerberos-related configurations

An (pseudo) Kerberos Plan may be as follows:

{
  "identities": [
    ... cluster-wide identity specifications ...
  ],
  "configurations": [
    ... cluster-wide configuration specifications ...
  ],
  "services": [
    {
      ... service-specific specifications ...
      "components": [
        ... component-specific specifications ...
     ]
    }
  ]
}

Issue Links

• is duplicated by: AMBARI-9142 Create new API endpoints for cluster and service kerberos descriptors