Skip to content

Commit eb27ad0

Browse files
Malewaresbernauer
andauthored
Adding troubleshooting for Kerberos (#702)
* Adding troubleshooting for kerberos * Updating xref references * Adding newline eof * Add suggestions Co-authored-by: Sebastian Bernauer <sebastian.bernauer@stackable.de> * Adding jvm-argument-overrides link * Fixing link to applications.adoc * revert changes * another change to the xref link * Move troubleshooting to be consistent with other operators --------- Co-authored-by: Sebastian Bernauer <sebastian.bernauer@stackable.de>
1 parent 9c29b94 commit eb27ad0

File tree

3 files changed

+41
-21
lines changed

3 files changed

+41
-21
lines changed
Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
= Troubleshooting
2+
3+
== HBase access with Kerberos authentication
4+
5+
Currently, xref:zookeeper:index.adoc[Zookeeper] stacklets can only be secured using mutual TLS.
6+
This means, if an application tries to connect to HBase, it would contact Zookeeper to figure the correct HBase nodes to talk to.
7+
In a Java world, you would define a `Client` which would carry the Kerberos requirements.
8+
9+
However, those requirements might be passed through and thus your client (e.g. xref:spark-k8s:usage-guide/operations/applications.adoc[SparkApplications]) would try to authenticate with Kerberos at the corresponding Zookeeper endpoint.
10+
This will result in a Kerberos ( authentication ) error.
11+
12+
To prevent this, you can set a xref:concepts:overrides.adoc#jvm-argument-overrides[JVM argument] like this (again e.g. SparkApplications) in all Pods which would like to talk to HBase:
13+
14+
[source,yaml]
15+
----
16+
jvmArgumentOverrides:
17+
add:
18+
- "-Dzookeeper.sasl.client=false"
19+
----
20+
21+
22+
== Additional stack-traces
23+
24+
To add more useful information to stack-traces caused by RPC issues, the xref:concepts:overrides.adoc#config-overrides[Config overrides documentation] can be used to replace the default Netty implementation:
25+
26+
[source,yaml]
27+
----
28+
masters:
29+
roleGroups:
30+
default:
31+
configOverrides:
32+
hbase-site.xml:
33+
hbase.rpc.client.impl: "org.apache.hadoop.hbase.ipc.BlockingRpcClient"
34+
regionServers:
35+
roleGroups:
36+
default:
37+
configOverrides:
38+
hbase-site.xml:
39+
hbase.rpc.client.impl: "org.apache.hadoop.hbase.ipc.BlockingRpcClient"
40+
----

docs/modules/hbase/pages/usage-guide/troubleshooting.adoc

Lines changed: 0 additions & 20 deletions
This file was deleted.

docs/modules/hbase/partials/nav.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,6 @@
1313
** xref:hbase:usage-guide/hbck2.adoc[]
1414
** xref:hbase:usage-guide/snapshot-export.adoc[]
1515
** xref:hbase:usage-guide/adls.adoc[]
16-
** xref:hbase:usage-guide/troubleshooting.adoc[]
1716
** xref:hbase:usage-guide/operations/index.adoc[]
1817
*** xref:hbase:usage-guide/operations/cluster-operations.adoc[]
1918
*** xref:hbase:usage-guide/operations/pod-placement.adoc[]
@@ -25,3 +24,4 @@
2524
** xref:hbase:reference/discovery.adoc[]
2625
** xref:hbase:reference/commandline-parameters.adoc[]
2726
** xref:hbase:reference/environment-variables.adoc[]
27+
* xref:hbase:troubleshooting/index.adoc[]

0 commit comments

Comments
 (0)