[
https://issues.apache.org/jira/browse/IMPALA-14029?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17950552#comment-17950552
]
ASF subversion and git services commented on IMPALA-14029:
----------------------------------------------------------
Commit b17f22048aadd941326dc46904b93dd0a177ca0e in impala's branch
refs/heads/master from Laszlo Gaal
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=b17f22048 ]
IMPALA-14029: Add Kerberos utilities to Docker image build
The Kerberos utility package was missing from the OS package list of
the Docker container build when the base image was detected being
a hardened Wolfi-based image. This prevented Impala coordinators from
renewing their Kerberos tickets in containerized and Kerberized
environments.
This patch adds the Kerberos utility package to the list of installed
packages for such minimal containers.
Change-Id: I84f295ac8ae4c000868abff0342b922beb141b5b
Reviewed-on: http://gerrit.cloudera.org:8080/22854
Reviewed-by: Norbert Luksa <[email protected]>
Tested-by: Laszlo Gaal <[email protected]>
> Coordinator frontend fails to find kinit when running in hardened container
> image
> ---------------------------------------------------------------------------------
>
> Key: IMPALA-14029
> URL: https://issues.apache.org/jira/browse/IMPALA-14029
> Project: IMPALA
> Issue Type: Bug
> Components: Infrastructure
> Affects Versions: Impala 5.0.0
> Reporter: Laszlo Gaal
> Assignee: Laszlo Gaal
> Priority: Major
>
> When running in a containerized environment secured with Kerberos, the Impala
> coordinator failed to renew its TGT after the initial expiration, because the
> Hadoop libraries linked to the frontend's Java code failed to locate and
> launch the Kerberos {{kinit}} utility.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
