KerberosConfig

import type { KerberosConfig } from "https://googleapis.deno.dev/v1/dataproc:v1.ts";

Specifies Kerberos related configuration.

interface KerberosConfig {

crossRealmTrustAdminServer?: string;

crossRealmTrustKdc?: string;

crossRealmTrustRealm?: string;

crossRealmTrustSharedPasswordUri?: string;

enableKerberos?: boolean;

kdcDbKeyUri?: string;

keyPasswordUri?: string;

keystorePasswordUri?: string;

keystoreUri?: string;

kmsKeyUri?: string;

realm?: string;

rootPrincipalPasswordUri?: string;

tgtLifetimeHours?: number;

truststorePasswordUri?: string;

truststoreUri?: string;

}

§Properties

crossRealmTrustAdminServer?: string

[src]

Optional. The admin server (IP or hostname) for the remote trusted realm in a cross realm trust relationship.

crossRealmTrustKdc?: string

[src]

Optional. The KDC (IP or hostname) for the remote trusted realm in a cross realm trust relationship.

crossRealmTrustRealm?: string

[src]

Optional. The remote realm the Dataproc on-cluster KDC will trust, should the user enable cross realm trust.

crossRealmTrustSharedPasswordUri?: string

[src]

Optional. The Cloud Storage URI of a KMS encrypted file containing the shared password between the on-cluster Kerberos realm and the remote trusted realm, in a cross realm trust relationship.

enableKerberos?: boolean

[src]

Optional. Flag to indicate whether to Kerberize the cluster (default: false). Set this field to true to enable Kerberos on a cluster.

kdcDbKeyUri?: string

[src]

Optional. The Cloud Storage URI of a KMS encrypted file containing the master key of the KDC database.

keyPasswordUri?: string

[src]

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided key. For the self-signed certificate, this password is generated by Dataproc.

keystorePasswordUri?: string

[src]

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided keystore. For the self-signed certificate, this password is generated by Dataproc.

keystoreUri?: string

[src]

Optional. The Cloud Storage URI of the keystore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.

kmsKeyUri?: string

[src]

Optional. The URI of the KMS key used to encrypt sensitive files.

realm?: string

[src]

Optional. The name of the on-cluster Kerberos realm. If not specified, the uppercased domain of hostnames will be the realm.

rootPrincipalPasswordUri?: string

[src]

Optional. The Cloud Storage URI of a KMS encrypted file containing the root principal password.

tgtLifetimeHours?: number

[src]

Optional. The lifetime of the ticket granting ticket, in hours. If not specified, or user specifies 0, then default value 10 will be used.

truststorePasswordUri?: string

[src]

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided truststore. For the self-signed certificate, this password is generated by Dataproc.

truststoreUri?: string

[src]

Optional. The Cloud Storage URI of the truststore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.