Kerberized Hbase with SSL
Before running the cluster change "volodymyr.local" to your hostname (hostname -f) in the docker-compose.yml
.
To have an outside access to the cluster you should install kerberos client:
sudo apt-get install krb-user
Then configure /etc/krb5.conf
as kerberos/krb5.conf
from this repository. You can simply replace an existed one.
After that run the cluster:
docker-compose up -d
To check if kerberos server works execute:
printf hbase | kinit hbase@KERBEROS.SERVER
klist
Copy SSL certificates:
mkdir ./certs
docker cp hbase.server:/opt/hbase-2.2.3/certs/key.key ./certs/
After hbase service is healthy
docker-compose ps
you may check if hbase rest api works:
curl --insecure --cert ./certs/cert.pem --key ./certs/key.key --negotiate -u : http://$(hostname -f)/version/cluster
To troubleshoot you can check the log files inside the container:
docker-compose exec hbase bash
# hbase logs
cd $HBASE_HOME/logs
# hadoop logs
cd $HADOOP_HOME/logs
About
Used images:
Inspired by:
License
This project is under MIT License