ramya3581 commented on issue #6381: URL: https://github.com/apache/gravitino/issues/6381#issuecomment-2620180768
Partially answering my own question. The offical Docker image runs in "Aux mode" for the iceberg rest server so the config is `gravitino.conf` Ensure that you also have your krb5.conf at `/etc/krb5.conf` ``` # # Licensed to the Apache Software Foundation (ASF) under one # or more contributor license agreements. See the NOTICE file # distributed with this work for additional information # regarding copyright ownership. The ASF licenses this file # to you under the Apache License, Version 2.0 (the # "License"); you may not use this file except in compliance # with the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, # software distributed under the License is distributed on an # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY # KIND, either express or implied. See the License for the # specific language governing permissions and limitations # under the License. # # THE CONFIGURATION FOR Gravitino SERVER gravitino.server.shutdown.timeout = 3000 # THE CONFIGURATION FOR Gravitino WEB SERVER # The host name of the built-in web server gravitino.server.webserver.host = 0.0.0.0 # The http port number of the built-in web server gravitino.server.webserver.httpPort = 8090 # The min thread size of the built-in web server gravitino.server.webserver.minThreads = 24 # The max thread size of the built-in web server gravitino.server.webserver.maxThreads = 200 # The stop timeout of the built-in web server gravitino.server.webserver.stopTimeout = 30000 # The timeout of idle connections gravitino.server.webserver.idleTimeout = 30000 # The executor thread pool work queue size of the built-in web server gravitino.server.webserver.threadPoolWorkQueueSize = 100 # The request header size of the built-in web server gravitino.server.webserver.requestHeaderSize = 131072 # The response header size of the built-in web server gravitino.server.webserver.responseHeaderSize = 131072 # THE CONFIGURATION FOR Gravitino ENTITY STORE # The entity store to use, we only supports relational gravitino.entity.store = relational # The backend for the entity store, we only supports JDBC gravitino.entity.store.relational = JDBCBackend # The JDBC URL for the entity store gravitino.entity.store.relational.jdbcUrl = jdbc:h2 # The JDBC driver class name gravitino.entity.store.relational.jdbcDriver = org.h2.Driver # The JDBC user name gravitino.entity.store.relational.jdbcUser = gravitino # The JDBC password gravitino.entity.store.relational.jdbcPassword = gravitino # THE CONFIGURATION FOR Gravitino CATALOG # The interval in milliseconds to evict the catalog cache gravitino.catalog.cache.evictionIntervalMs = 3600000 # THE CONFIGURATION FOR authorization # Whether Gravitino enable authorization or not gravitino.authorization.enable = false # The admins of Gravitino service, multiple admins are spitted by comma. gravitino.authorization.serviceAdmins = anonymous # THE CONFIGURATION FOR AUXILIARY SERVICE # Auxiliary service names, separate by ',' gravitino.auxService.names = iceberg-rest # Iceberg REST service classpath gravitino.iceberg-rest.classpath = iceberg-rest-server/libs, iceberg-rest-server/conf # Iceberg REST service host gravitino.iceberg-rest.host = 0.0.0.0 # Iceberg REST service http port gravitino.iceberg-rest.httpPort = 9001 # The backend Iceberg catalog for Iceberg REST service, it's recommended to change to hive or jdbc gravitino.iceberg-rest.catalog-backend = hive # The warehouse directory of Iceberg catalog for Iceberg REST service gravitino.iceberg-rest.warehouse = /tmp/ gravitino.iceberg-rest.uri = thrift://hive-metastore:9083 gravitino.iceberg-rest.authentication.type = kerberos gravitino.iceberg-rest.authentication.impersonation-enable = false gravitino.iceberg-rest.hive.metastore.sasl.enabled = true gravitino.iceberg-rest.hive.metastore.kerberos.principal = <use service principal name here> gravitino.iceberg-rest.authentication.kerberos.principal = <use clientprincipal name here> gravitino.iceberg-rest.authentication.kerberos.keytab-uri = file:///path/to/my.keytab gravitino.iceberg-rest.authentication.kerberos.check-interval-sec = 60 gravitino.iceberg-rest.authentication.kerberos.keytab-fetch-timeout-sec = 60 gravitino.iceberg-rest.catalog-backend-name = hive ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@gravitino.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org