ambari-server/src/main/resources/common-services/AMBARI_METRICS/0.1.0/kerberos.json

{
  "services": [
    {
      "name": "AMBARI_METRICS",
      "identities": [
        {
          "name": "ambari_metrics_spnego",
          "reference": "/spnego"
        }
      ],
      "components": [
        {
          "name": "METRICS_MONITOR",
          "identities": [
            {
              "name": "ams_monitor",
              "principal": {
                "value": "amsmon/_HOST@${realm}",
                "type": "service",
                "configuration": "ams-hbase-security-site/ams.monitor.principal",
                "local_username": "${ams-env/ambari_metrics_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/ams-monitor.keytab",
                "owner": {
                  "name": "${ams-env/ambari_metrics_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "ams-hbase-security-site/ams.monitor.keytab"
              }
            }
          ]
        },
        {
          "name": "METRICS_COLLECTOR",
          "identities": [
            {
              "name": "ambari_metrics_metrics_collector_hdfs",
              "reference": "/HDFS/NAMENODE/hdfs",
              "when" : {
                "contains" : ["services", "HDFS"]
              }
            },
            {
              "name": "ams_hbase_master_hbase",
              "principal": {
                "value": "amshbase/_HOST@${realm}",
                "type": "service",
                "configuration": "ams-hbase-security-site/hbase.master.kerberos.principal",
                "local_username": "${ams-env/ambari_metrics_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/ams-hbase.master.keytab",
                "owner": {
                  "name": "${ams-env/ambari_metrics_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "ams-hbase-security-site/hbase.master.keytab.file"
              }
            },
            {
              "name": "ams_hbase_regionserver_hbase",
              "principal": {
                "value": "amshbase/_HOST@${realm}",
                "type": "service",
                "configuration": "ams-hbase-security-site/hbase.regionserver.kerberos.principal",
                "local_username": "${ams-env/ambari_metrics_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/ams-hbase.regionserver.keytab",
                "owner": {
                  "name": "${ams-env/ambari_metrics_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "ams-hbase-security-site/hbase.regionserver.keytab.file"
              }
            },
            {
              "name": "ams_collector",
              "principal": {
                "value": "amshbase/_HOST@${realm}",
                "type": "service",
                "configuration": "ams-hbase-security-site/hbase.myclient.principal",
                "local_username": "${ams-env/ambari_metrics_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/ams.collector.keytab",
                "owner": {
                  "name": "${ams-env/ambari_metrics_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "ams-hbase-security-site/hbase.myclient.keytab"
              }
            },
            {
              "name": "ams_zookeeper",
              "principal": {
                "value": "amszk/_HOST@${realm}",
                "type": "service",
                "configuration": "ams-hbase-security-site/ams.zookeeper.principal",
                "local_username": "${ams-env/ambari_metrics_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/ams-zk.service.keytab",
                "owner": {
                  "name": "${ams-env/ambari_metrics_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "ams-hbase-security-site/ams.zookeeper.keytab"
              }
            }
          ],
          "configurations": [
            {
              "ams-hbase-security-site": {
                "hbase.security.authentication": "kerberos",
                "hbase.security.authorization": "true",
                "hadoop.security.authentication": "kerberos",
                "hbase.coprocessor.master.classes": "org.apache.hadoop.hbase.security.access.AccessController",
                "hbase.coprocessor.region.classes": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController",
                "hbase.zookeeper.property.kerberos.removeHostFromPrincipal": "true",
                "hbase.zookeeper.property.kerberos.removeRealmFromPrincipal": "true",
                "hbase.zookeeper.property.authProvider.1": "org.apache.zookeeper.server.auth.SASLAuthenticationProvider",
                "hbase.zookeeper.property.jaasLoginRenew": "3600000"
              }
            },
            {
              "ams-hbase-site": {
                "zookeeper.znode.parent": "/ams-hbase-secure"
              }
            }
          ]
        }
      ]
    }
  ]
}