Kerberized Hbase with SSL

Before running the cluster change "volodymyr.local" to your hostname (hostname -f) in the docker-compose.yml.

To have an outside access to the cluster you should install kerberos client:

sudo apt-get install krb-user

Then configure /etc/krb5.conf as kerberos/krb5.conf from this repository. You can simply replace an existed one.

After that run the cluster:

docker-compose up -d

To check if kerberos server works execute:

printf hbase | kinit [email protected]
klist

Copy SSL certificates:

mkdir ./certs

docker cp hbase.server:/opt/hbase-2.2.3/certs/key.key ./certs/

After hbase service is healthy

docker-compose ps

you may check if hbase rest api works:

curl --insecure --cert ./certs/cert.pem --key ./certs/key.key --negotiate -u : http://$(hostname -f)/version/cluster

To troubleshoot you can check the log files inside the container:

docker-compose exec hbase bash

# hbase logs
cd $HBASE_HOME/logs

# hadoop logs
cd $HADOOP_HOME/logs

About

Used images:

bde2020/hadoop-base

sequenceiq/kerberos

Inspired by:

knappek/phoenix-secure

License

This project is under MIT License