Bigtop
  1. Bigtop
  2. BIGTOP-396

Missing resource dependencies in puppet for secure clusters

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.4.0
    • Fix Version/s: 0.3.0, 0.4.0
    • Component/s: deployment
    • Labels:
      None

      Description

      Currently, bigtop puppet will not run reliably for secure clusters, because resources are likely to be executed in the wrong order. I'm attaching a patch that attempts to address this.

      1. patch.txt
        7 kB
        Patrick Taylor Ramsey
      2. patch.20120209-22_41_44UTC.txt
        14 kB
        Patrick Taylor Ramsey

        Activity

        Hide
        Patrick Taylor Ramsey added a comment - - edited
        • Removed hadoop-specific code from kerberos module (per Roman Shaposhnik's suggestion) and into "hadoop", "hadoop-hbase", and "hadoop-oozie".
        • Made kerberized hadoop services conditionally depend on the relevant keytabs
        • Added a few dependencies that I missed in the last go 'round
        • Pulled host_keytab and create_princ resource definitions out of kerberos::client:: up a level to kerberos::
        • Simplified kerberos::host_keytab by removing princ_map (which made it slightly easier to define all the keytabs at once, which we don't do anymore)
        Show
        Patrick Taylor Ramsey added a comment - - edited Removed hadoop-specific code from kerberos module (per Roman Shaposhnik's suggestion) and into "hadoop", "hadoop-hbase", and "hadoop-oozie". Made kerberized hadoop services conditionally depend on the relevant keytabs Added a few dependencies that I missed in the last go 'round Pulled host_keytab and create_princ resource definitions out of kerberos::client:: up a level to kerberos:: Simplified kerberos::host_keytab by removing princ_map (which made it slightly easier to define all the keytabs at once, which we don't do anymore)
        Hide
        Patrick Taylor Ramsey added a comment -
        • Removed reference to nonexistent /usr/local/bin/hdfs_mkdir.sh
        Show
        Patrick Taylor Ramsey added a comment - Removed reference to nonexistent /usr/local/bin/hdfs_mkdir.sh
        Hide
        Patrick Taylor Ramsey added a comment -
        • Renamed Exec["kinit"] to Exec["HDFS kinit"]
        Show
        Patrick Taylor Ramsey added a comment - Renamed Exec ["kinit"] to Exec ["HDFS kinit"]
        Hide
        Patrick Taylor Ramsey added a comment -
        • Moved kdc -> client and kadmin -> client dependencies into kerberos module
        Show
        Patrick Taylor Ramsey added a comment - Moved kdc -> client and kadmin -> client dependencies into kerberos module
        Hide
        Roman Shaposhnik added a comment -

        +1. Thanks a million for the great work! Much appreciated. I'll commit this tomorrow.

        Show
        Roman Shaposhnik added a comment - +1. Thanks a million for the great work! Much appreciated. I'll commit this tomorrow.

          People

          • Assignee:
            Patrick Taylor Ramsey
            Reporter:
            Patrick Taylor Ramsey
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development