apache / apache/gravitino

[FEATURE] Hudi on hms supports the Kerberos authentication mode

Open
#5,663 0 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
3.2k
Forks
935
Avg merge
1d 15h
Merged PRs (30d)
315

Description

### Describe the feature

Based on the hadoop ecosystem, authentication access to data is very important for enterprises, and using Kerberos authentication is also a more common and general security way. Please consider supporting the community as soon as possible, and we look forward to using it in the company as soon as possible!

### Motivation

Based on the hadoop ecosystem, authentication access to data is very important for enterprises, and using Kerberos authentication is also a more common and general security way. Please consider supporting the community as soon as possible, and we look forward to using it in the company as soon as possible!

### Describe the solution

It is expected that the iceberg catalog configuration can support the selection of authentication methods on the hudi catalog: If the Kerberos authentication mode is selected, configure the keytab authentication file and the krb5.conf file to perform the entire process of obtaining Hudi metadata from the hms configured by the authentication accessor.

### Additional context

_No response_

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by locating the Hudi catalog and its Iceberg catalog configuration, then trace how metadata is fetched from HMS; done means an authentication-mode choice can use keytab and krb5.conf settings to retrieve Hudi metadata through Kerberos.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, data-engineering
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.