Uploaded image for project: 'Livy'
  1. Livy
  2. LIVY-753

How to submit keytab to kerberoized livy service remotely

    XMLWordPrintableJSON

Details

    • Question
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 0.6.0, 0.7.0
    • 0.9.0
    • API

    Description

      I have setup livy in a kerberized environment and have impersonation disabled (livy.impersonation.enabled = false). I can't use impersonation due to access issue with the proxy user.

      Hence, jobs have to send their principal and keytab using the spark configs "spark.yarn.principal" and "spark.yarn.keytab". In my testing, I found that spark.yarn.keytab only accepts local file and the keytab file would need to reside on the same server as the livy service. However, I would like to allow remote access to the livy endpoint, which the keytab would then be on a remote machine.

      Hence, I would like to check how to submit the keytab remotely. I have tried using the files parameter but could not get it to work.

      Attachments

        Activity

          People

            Unassigned Unassigned
            alexanghh Alex Ang Hock Hee
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: