openstack
/
sahara-image-elements
Code Issues Proposed changes

add element for kerberos artifacts 

bp: initial-kerberos-integration
Change-Id: Ic54fcb25f7234795abefb739de91562b1cb742ef
This commit is contained in:
Vitaly Gridnev 2016-08-04 17:14:01 +03:00
parent a0f8b24a09
commit 253376c11a
6 changed files with 55 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
diskimage-create/diskimage-create.sh
View File

@ -609,19 +609,19 @@ if [ -z "$PLUGIN" -o "$PLUGIN" = "ambari" ]; then
if [ -z "$BASE_IMAGE_OS" -o "$BASE_IMAGE_OS" = "ubuntu" ]; then
ambari_ubuntu_image_name=${ambari_ubuntu_image_name:-ubuntu_sahara_ambari}
ambari_element_sequence="ambari $JAVA_ELEMENT swift_hadoop"
ambari_element_sequence="ambari $JAVA_ELEMENT swift_hadoop kdc"
export DIB_RELEASE="trusty"
image_create ubuntu $ambari_ubuntu_image_name $ambari_element_sequence
unset DIB_RELEASE
fi
if [ -z "$BASE_IMAGE_OS" -o "$BASE_IMAGE_OS" = "centos" ]; then
ambari_centos_image_name=${ambari_centos_image_name:-centos_sahara_ambari}
ambari_element_sequence="ambari $JAVA_ELEMENT disable-firewall swift_hadoop"
ambari_element_sequence="ambari $JAVA_ELEMENT disable-firewall swift_hadoop kdc"
image_create centos $ambari_centos_image_name $ambari_element_sequence
fi
if [ -z "$BASE_IMAGE_OS" -o "$BASE_IMAGE_OS" = "centos7" ]; then
ambari_centos7_image_name=${ambari_centos7_image_name:-"centos7-sahara-ambari"}
ambari_element_sequence="disable-selinux ambari $JAVA_ELEMENT disable-firewall swift_hadoop"
ambari_element_sequence="disable-selinux ambari $JAVA_ELEMENT disable-firewall swift_hadoop kdc"
image_create centos7 $ambari_centos7_image_name $ambari_element_sequence
fi
@ -648,7 +648,7 @@ if [ -z "$PLUGIN" -o "$PLUGIN" = "cloudera" ]; then
fi
export DIB_CDH_MINOR_VERSION=${DIB_CDH_MINOR_VERSION:-$HADOOP_VERSION.0}
cloudera_elements_sequence="hadoop-cloudera swift_hadoop"
cloudera_elements_sequence="hadoop-cloudera swift_hadoop kdc"
if [ -z "$BASE_IMAGE_OS" -o "$BASE_IMAGE_OS" = "ubuntu" ]; then
if [ -z "$HADOOP_VERSION" -o "$HADOOP_VERSION" = "5.0" ]; then
cloudera_5_0_ubuntu_image_name=${cloudera_5_0_ubuntu_image_name:-ubuntu_sahara_cloudera_5_0_0}

13
elements/kdc/README.rst Normal file
View File

@ -0,0 +1,13 @@
===
kdc
===
Installs all needed artifacts for KDC server and Kerberos authentication
Environment Variables
---------------------
DIB_UNLIMITED_SECURITY_LOCATION
:Required: No
:Default: http://sahara-files.mirantis.com/kerberos-artifacts/
:Description: Place where UnlimitedSecurity polices are located

1
elements/kdc/element-deps Normal file
View File

@ -0,0 +1 @@
package-installs

7
elements/kdc/package-installs.yaml Normal file
View File

@ -0,0 +1,7 @@
wget:
phase: pre-install.d
krb-server:
krb-libs:
ldap-utils:
krb-client:
rng-tools:

18
elements/kdc/pkg-map Normal file
View File

@ -0,0 +1,18 @@
{
"family": {
"debian": {
"krb-server": "krb5-admin-server",
"krb-libs": "libpam-krb5",
"ldap-utils": "ldap-utils",
"krb-client": "krb5-user",
"rng-tools": "rng-tools"
},
"redhat": {
"krb-server": "krb5-server",
"ldap-utils": "",
"krb-libs": "krb5-libs",
"krb-client": "krb5-workstation",
"rng-tools": "rng-tools"
}
}
}

12
elements/kdc/pre-install.d/76-unlimited-security-artifacts Executable file
View File

@ -0,0 +1,12 @@
#!/bin/bash
if [ "${DIB_DEBUG_TRACE:-0}" -gt 0 ]; then
set -x
fi
set -eu
set -o pipefail
DIB_UNLIMITED_SECURITY_LOCATION="${DIB_UNLIMITED_SECURITY_LOCATION:-http://sahara-files.mirantis.com/kerberos-artifacts/}"
mkdir /tmp/UnlimitedPolicy/
wget $DIB_UNLIMITED_SECURITY_LOCATION/local_policy.jar -O /tmp/UnlimitedPolicy/local_policy.jar
wget $DIB_UNLIMITED_SECURITY_LOCATION/US_export_policy.jar -O /tmp/UnlimitedPolicy/US_export_policy.jar