class Google::Apis::DataprocV1beta2::KerberosConfig

Specifies Kerberos related configuration.

Attributes

cross_realm_trust_admin_server[RW]

Optional. The admin server (IP or hostname) for the remote trusted realm in a cross realm trust relationship. Corresponds to the JSON property `crossRealmTrustAdminServer` @return [String]

cross_realm_trust_kdc[RW]

Optional. The KDC (IP or hostname) for the remote trusted realm in a cross realm trust relationship. Corresponds to the JSON property `crossRealmTrustKdc` @return [String]

cross_realm_trust_realm[RW]

Optional. The remote realm the Dataproc on-cluster KDC will trust, should the user enable cross realm trust. Corresponds to the JSON property `crossRealmTrustRealm` @return [String]

cross_realm_trust_shared_password_uri[RW]

Optional. The Cloud Storage URI of a KMS encrypted file containing the shared password between the on-cluster Kerberos realm and the remote trusted realm, in a cross realm trust relationship. Corresponds to the JSON property `crossRealmTrustSharedPasswordUri` @return [String]

enable_kerberos[RW]

Optional. Flag to indicate whether to Kerberize the cluster (default: false). Set this field to true to enable Kerberos on a cluster. Corresponds to the JSON property `enableKerberos` @return [Boolean]

enable_kerberos?[RW]

Optional. Flag to indicate whether to Kerberize the cluster (default: false). Set this field to true to enable Kerberos on a cluster. Corresponds to the JSON property `enableKerberos` @return [Boolean]

kdc_db_key_uri[RW]

Optional. The Cloud Storage URI of a KMS encrypted file containing the master key of the KDC database. Corresponds to the JSON property `kdcDbKeyUri` @return [String]

key_password_uri[RW]

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided key. For the self-signed certificate, this password is generated by Dataproc. Corresponds to the JSON property `keyPasswordUri` @return [String]

keystore_password_uri[RW]

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided keystore. For the self-signed certificate, this password is generated by Dataproc. Corresponds to the JSON property `keystorePasswordUri` @return [String]

keystore_uri[RW]

Optional. The Cloud Storage URI of the keystore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate. Corresponds to the JSON property `keystoreUri` @return [String]

kms_key_uri[RW]

Optional. The uri of the KMS key used to encrypt various sensitive files. Corresponds to the JSON property `kmsKeyUri` @return [String]

realm[RW]

Optional. The name of the on-cluster Kerberos realm. If not specified, the uppercased domain of hostnames will be the realm. Corresponds to the JSON property `realm` @return [String]

root_principal_password_uri[RW]

Optional. The Cloud Storage URI of a KMS encrypted file containing the root principal password. Corresponds to the JSON property `rootPrincipalPasswordUri` @return [String]

tgt_lifetime_hours[RW]

Optional. The lifetime of the ticket granting ticket, in hours. If not specified, or user specifies 0, then default value 10 will be used. Corresponds to the JSON property `tgtLifetimeHours` @return [Fixnum]

truststore_password_uri[RW]

Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided truststore. For the self-signed certificate, this password is generated by Dataproc. Corresponds to the JSON property `truststorePasswordUri` @return [String]

truststore_uri[RW]

Optional. The Cloud Storage URI of the truststore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate. Corresponds to the JSON property `truststoreUri` @return [String]

Public Class Methods

new(**args) click to toggle source
# File lib/google/apis/dataproc_v1beta2/classes.rb, line 1934
def initialize(**args)
   update!(**args)
end

Public Instance Methods

update!(**args) click to toggle source

Update properties of this object

# File lib/google/apis/dataproc_v1beta2/classes.rb, line 1939
def update!(**args)
  @cross_realm_trust_admin_server = args[:cross_realm_trust_admin_server] if args.key?(:cross_realm_trust_admin_server)
  @cross_realm_trust_kdc = args[:cross_realm_trust_kdc] if args.key?(:cross_realm_trust_kdc)
  @cross_realm_trust_realm = args[:cross_realm_trust_realm] if args.key?(:cross_realm_trust_realm)
  @cross_realm_trust_shared_password_uri = args[:cross_realm_trust_shared_password_uri] if args.key?(:cross_realm_trust_shared_password_uri)
  @enable_kerberos = args[:enable_kerberos] if args.key?(:enable_kerberos)
  @kdc_db_key_uri = args[:kdc_db_key_uri] if args.key?(:kdc_db_key_uri)
  @key_password_uri = args[:key_password_uri] if args.key?(:key_password_uri)
  @keystore_password_uri = args[:keystore_password_uri] if args.key?(:keystore_password_uri)
  @keystore_uri = args[:keystore_uri] if args.key?(:keystore_uri)
  @kms_key_uri = args[:kms_key_uri] if args.key?(:kms_key_uri)
  @realm = args[:realm] if args.key?(:realm)
  @root_principal_password_uri = args[:root_principal_password_uri] if args.key?(:root_principal_password_uri)
  @tgt_lifetime_hours = args[:tgt_lifetime_hours] if args.key?(:tgt_lifetime_hours)
  @truststore_password_uri = args[:truststore_password_uri] if args.key?(:truststore_password_uri)
  @truststore_uri = args[:truststore_uri] if args.key?(:truststore_uri)
end