[HADOOP-17794] Add a sample configuration to use ZKDelegationTokenSecretManager in Hadoop KMS

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.4.0, 3.2.3, 3.3.2
• Component/s: documentation, kms, security
• Labels: pull-request-available
• Assignee: Akira Ajisaka
• Reporter: Akira Ajisaka
• Created: 08/Jul/21 08:48
• Updated: 09/Jul/21 14:54
• Resolved: 09/Jul/21 13:54

Description

The following parameters should be documented in
https://hadoop.apache.org/docs/stable/hadoop-kms/index.html#Delegation_Tokens

• hadoop.kms.authentication.zk-dt-secret-manager.enable
• hadoop.kms.authentication.zk-dt-secret-manager.kerberos.keytab
• hadoop.kms.authentication.zk-dt-secret-manager.kerberos.principal
• hadoop.kms.authentication.zk-dt-secret-manager.zkConnectionString
• hadoop.kms.authentication.zk-dt-secret-manager.znodeWorkingPath
• hadoop.kms.authentication.zk-dt-secret-manager.zkAuthType

Issue Links

• relates to: HADOOP-17568 Mapred/YARN job fails due to kms-dt can't be found in cache with LoadBalancingKMSClientProvider + Kerberos
• links to: GitHub Pull Request #3190