WebHDFS requires user's certificates in the DataNodes

Description

Certain WebHDFS operations are redirected to a DataNode from the NameNode. Such operations are create a file, open a file etc. When the DataNode receives a WebHDFS request, it creates a DFS client on behalf of the requested user to perform these operations.

When Hops TLS is enabled, the client will look for the user's x.509 certificates and it will fail as they are never materialized in DataNodes.

 

Design document:

Status

Assignee

Antonis Kouzoupis

Reporter

Antonis Kouzoupis

Labels

None

Fix versions

Affects versions

Priority

Medium
Configure