Skip to content

Commit bc9d27d

Browse files
committed
Adding troubleshooting for kerberos
1 parent 671c6c3 commit bc9d27d

File tree

2 files changed

+19
-0
lines changed

2 files changed

+19
-0
lines changed
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
= Troubleshooting
2+
3+
== Hbase access with kerberos authentication
4+
5+
Currently, xref:zookeeper-operator:index.adoc[Zookeeper] is not secured with authentication. This means, if an application tries to connect to Hbase, it would ask the zookeeper quorum to figure the correct nodes to talk to. In a Java world, you would define a `Client` which would carry the kerberos requirements.
6+
7+
However, those requirements might be passed through and thus your client ( e.g. xref:spark-k8s-operator:usage-guide:operations:applications.adoc[SparkApplications] ) would try to authenticate with kerberos at the corresponding Zookeeper endpoint. This will result in a kerberos ( authentication ) error.
8+
9+
To prevent this, you can set a jvm argument like ( again e.g. SparkApplications )
10+
11+
[source,yaml]
12+
----
13+
jvmArgumentOverrides:
14+
add:
15+
- "-Dzookeeper.sasl.client=false"
16+
----
17+
18+
in all pods which would like to talk to Hbase.

docs/modules/hbase/partials/nav.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,3 +25,4 @@
2525
** xref:hbase:reference/discovery.adoc[]
2626
** xref:hbase:reference/commandline-parameters.adoc[]
2727
** xref:hbase:reference/environment-variables.adoc[]
28+
* xref:hbase:troubleshooting/index.adoc[]

0 commit comments

Comments
 (0)