ClusterClusterConfigSecurityConfigKerberosConfig

data class ClusterClusterConfigSecurityConfigKerberosConfig(val crossRealmTrustAdminServer: String? = null, val crossRealmTrustKdc: String? = null, val crossRealmTrustRealm: String? = null, val crossRealmTrustSharedPasswordUri: String? = null, val enableKerberos: Boolean? = null, val kdcDbKeyUri: String? = null, val keyPasswordUri: String? = null, val keystorePasswordUri: String? = null, val keystoreUri: String? = null, val kmsKeyUri: String, val realm: String? = null, val rootPrincipalPasswordUri: String, val tgtLifetimeHours: Int? = null, val truststorePasswordUri: String? = null, val truststoreUri: String? = null)

Constructors

constructor(crossRealmTrustAdminServer: String? = null, crossRealmTrustKdc: String? = null, crossRealmTrustRealm: String? = null, crossRealmTrustSharedPasswordUri: String? = null, enableKerberos: Boolean? = null, kdcDbKeyUri: String? = null, keyPasswordUri: String? = null, keystorePasswordUri: String? = null, keystoreUri: String? = null, kmsKeyUri: String, realm: String? = null, rootPrincipalPasswordUri: String, tgtLifetimeHours: Int? = null, truststorePasswordUri: String? = null, truststoreUri: String? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

The admin server (IP or hostname) for the remote trusted realm in a cross realm trust relationship.

Link copied to clipboard

The KDC (IP or hostname) for the remote trusted realm in a cross realm trust relationship.

Link copied to clipboard

The remote realm the Dataproc on-cluster KDC will trust, should the user enable cross realm trust.

Link copied to clipboard

The Cloud Storage URI of a KMS encrypted file containing the shared password between the on-cluster Kerberos realm and the remote trusted realm, in a cross realm trust relationship.

Link copied to clipboard
val enableKerberos: Boolean? = null

Flag to indicate whether to Kerberize the cluster.

Link copied to clipboard
val kdcDbKeyUri: String? = null

The Cloud Storage URI of a KMS encrypted file containing the master key of the KDC database.

Link copied to clipboard
val keyPasswordUri: String? = null

The Cloud Storage URI of a KMS encrypted file containing the password to the user provided key. For the self-signed certificate, this password is generated by Dataproc.

Link copied to clipboard

The Cloud Storage URI of a KMS encrypted file containing the password to the user provided keystore. For the self-signed certificated, the password is generated by Dataproc.

Link copied to clipboard
val keystoreUri: String? = null

The Cloud Storage URI of the keystore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.

Link copied to clipboard

The URI of the KMS key used to encrypt various sensitive files.

Link copied to clipboard
val realm: String? = null

The name of the on-cluster Kerberos realm. If not specified, the uppercased domain of hostnames will be the realm.

Link copied to clipboard

The Cloud Storage URI of a KMS encrypted file containing the root principal password.

Link copied to clipboard
val tgtLifetimeHours: Int? = null

The lifetime of the ticket granting ticket, in hours.

Link copied to clipboard

The Cloud Storage URI of a KMS encrypted file containing the password to the user provided truststore. For the self-signed certificate, this password is generated by Dataproc.

Link copied to clipboard
val truststoreUri: String? = null

The Cloud Storage URI of the truststore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.