WorkflowTemplatePlacementManagedClusterConfigSecurityConfigKerberosConfig

data class WorkflowTemplatePlacementManagedClusterConfigSecurityConfigKerberosConfig(val crossRealmTrustAdminServer: String? = null, val crossRealmTrustKdc: String? = null, val crossRealmTrustRealm: String? = null, val crossRealmTrustSharedPassword: String? = null, val enableKerberos: Boolean? = null, val kdcDbKey: String? = null, val keyPassword: String? = null, val keystore: String? = null, val keystorePassword: String? = null, val kmsKey: String? = null, val realm: String? = null, val rootPrincipalPassword: String? = null, val tgtLifetimeHours: Int? = null, val truststore: String? = null, val truststorePassword: String? = null)

Constructors

fun WorkflowTemplatePlacementManagedClusterConfigSecurityConfigKerberosConfig(crossRealmTrustAdminServer: String? = null, crossRealmTrustKdc: String? = null, crossRealmTrustRealm: String? = null, crossRealmTrustSharedPassword: String? = null, enableKerberos: Boolean? = null, kdcDbKey: String? = null, keyPassword: String? = null, keystore: String? = null, keystorePassword: String? = null, kmsKey: String? = null, realm: String? = null, rootPrincipalPassword: String? = null, tgtLifetimeHours: Int? = null, truststore: String? = null, truststorePassword: String? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

Optional. The admin server (IP or hostname) for the remote trusted realm in a cross realm trust relationship.

Link copied to clipboard

Optional. The KDC (IP or hostname) for the remote trusted realm in a cross realm trust relationship.

Link copied to clipboard

Optional. The remote realm the Dataproc on-cluster KDC will trust, should the user enable cross realm trust.

Link copied to clipboard

Optional. The Cloud Storage URI of a KMS encrypted file containing the shared password between the on-cluster Kerberos realm and the remote trusted realm, in a cross realm trust relationship.

Link copied to clipboard
val enableKerberos: Boolean? = null

Optional. Flag to indicate whether to Kerberize the cluster (default: false). Set this field to true to enable Kerberos on a cluster.

Link copied to clipboard
val kdcDbKey: String? = null

Optional. The Cloud Storage URI of a KMS encrypted file containing the master key of the KDC database.

Link copied to clipboard
val keyPassword: String? = null

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided key. For the self-signed certificate, this password is generated by Dataproc.

Link copied to clipboard
val keystore: String? = null

Optional. The Cloud Storage URI of the keystore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.

Link copied to clipboard

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided keystore. For the self-signed certificate, this password is generated by Dataproc.

Link copied to clipboard
val kmsKey: String? = null

Optional. The uri of the KMS key used to encrypt various sensitive files.

Link copied to clipboard
val realm: String? = null

Optional. The name of the on-cluster Kerberos realm. If not specified, the uppercased domain of hostnames will be the realm.

Link copied to clipboard

Optional. The Cloud Storage URI of a KMS encrypted file containing the root principal password.

Link copied to clipboard
val tgtLifetimeHours: Int? = null

Optional. The lifetime of the ticket granting ticket, in hours. If not specified, or user specifies 0, then default value 10 will be used.

Link copied to clipboard
val truststore: String? = null

Optional. The Cloud Storage URI of the truststore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.

Link copied to clipboard

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided truststore. For the self-signed certificate, this password is generated by Dataproc.