Class ClusterClusterConfigSecurityConfigKerberosConfig


  • public final class ClusterClusterConfigSecurityConfigKerberosConfig
    extends java.lang.Object
    • Method Detail

      • crossRealmTrustAdminServer

        public java.util.Optional<java.lang.String> crossRealmTrustAdminServer()
        Returns:
        The admin server (IP or hostname) for the remote trusted realm in a cross realm trust relationship.
      • crossRealmTrustKdc

        public java.util.Optional<java.lang.String> crossRealmTrustKdc()
        Returns:
        The KDC (IP or hostname) for the remote trusted realm in a cross realm trust relationship.
      • crossRealmTrustRealm

        public java.util.Optional<java.lang.String> crossRealmTrustRealm()
        Returns:
        The remote realm the Dataproc on-cluster KDC will trust, should the user enable cross realm trust.
      • crossRealmTrustSharedPasswordUri

        public java.util.Optional<java.lang.String> crossRealmTrustSharedPasswordUri()
        Returns:
        The Cloud Storage URI of a KMS encrypted file containing the shared password between the on-cluster Kerberos realm and the remote trusted realm, in a cross realm trust relationship.
      • enableKerberos

        public java.util.Optional<java.lang.Boolean> enableKerberos()
        Returns:
        Flag to indicate whether to Kerberize the cluster.
      • kdcDbKeyUri

        public java.util.Optional<java.lang.String> kdcDbKeyUri()
        Returns:
        The Cloud Storage URI of a KMS encrypted file containing the master key of the KDC database.
      • keyPasswordUri

        public java.util.Optional<java.lang.String> keyPasswordUri()
        Returns:
        The Cloud Storage URI of a KMS encrypted file containing the password to the user provided key. For the self-signed certificate, this password is generated by Dataproc.
      • keystorePasswordUri

        public java.util.Optional<java.lang.String> keystorePasswordUri()
        Returns:
        The Cloud Storage URI of a KMS encrypted file containing the password to the user provided keystore. For the self-signed certificated, the password is generated by Dataproc.
      • keystoreUri

        public java.util.Optional<java.lang.String> keystoreUri()
        Returns:
        The Cloud Storage URI of the keystore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
      • kmsKeyUri

        public java.lang.String kmsKeyUri()
        Returns:
        The URI of the KMS key used to encrypt various sensitive files.
      • realm

        public java.util.Optional<java.lang.String> realm()
        Returns:
        The name of the on-cluster Kerberos realm. If not specified, the uppercased domain of hostnames will be the realm.
      • rootPrincipalPasswordUri

        public java.lang.String rootPrincipalPasswordUri()
        Returns:
        The Cloud Storage URI of a KMS encrypted file containing the root principal password.
      • tgtLifetimeHours

        public java.util.Optional<java.lang.Integer> tgtLifetimeHours()
        Returns:
        The lifetime of the ticket granting ticket, in hours.
      • truststorePasswordUri

        public java.util.Optional<java.lang.String> truststorePasswordUri()
        Returns:
        The Cloud Storage URI of a KMS encrypted file containing the password to the user provided truststore. For the self-signed certificate, this password is generated by Dataproc.
      • truststoreUri

        public java.util.Optional<java.lang.String> truststoreUri()
        Returns:
        The Cloud Storage URI of the truststore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate. ***