pub struct KerberosConfig {Show 15 fields
pub cross_realm_trust_admin_server: Option<String>,
pub cross_realm_trust_kdc: Option<String>,
pub cross_realm_trust_realm: Option<String>,
pub cross_realm_trust_shared_password_uri: Option<String>,
pub enable_kerberos: Option<bool>,
pub kdc_db_key_uri: Option<String>,
pub key_password_uri: Option<String>,
pub keystore_password_uri: Option<String>,
pub keystore_uri: Option<String>,
pub kms_key_uri: Option<String>,
pub realm: Option<String>,
pub root_principal_password_uri: Option<String>,
pub tgt_lifetime_hours: Option<i32>,
pub truststore_password_uri: Option<String>,
pub truststore_uri: Option<String>,
}Expand description
Specifies Kerberos related configuration.
This type is not used in any activity, and only used as part of another schema.
Fields§
§cross_realm_trust_admin_server: Option<String>Optional. The admin server (IP or hostname) for the remote trusted realm in a cross realm trust relationship.
cross_realm_trust_kdc: Option<String>Optional. The KDC (IP or hostname) for the remote trusted realm in a cross realm trust relationship.
cross_realm_trust_realm: Option<String>Optional. The remote realm the Dataproc on-cluster KDC will trust, should the user enable cross realm trust.
Optional. The Cloud Storage URI of a KMS encrypted file containing the shared password between the on-cluster Kerberos realm and the remote trusted realm, in a cross realm trust relationship.
enable_kerberos: Option<bool>Optional. Flag to indicate whether to Kerberize the cluster (default: false). Set this field to true to enable Kerberos on a cluster.
kdc_db_key_uri: Option<String>Optional. The Cloud Storage URI of a KMS encrypted file containing the master key of the KDC database.
key_password_uri: Option<String>Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided key. For the self-signed certificate, this password is generated by Dataproc.
keystore_password_uri: Option<String>Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided keystore. For the self-signed certificate, this password is generated by Dataproc.
keystore_uri: Option<String>Optional. The Cloud Storage URI of the keystore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
kms_key_uri: Option<String>Optional. The URI of the KMS key used to encrypt sensitive files.
realm: Option<String>Optional. The name of the on-cluster Kerberos realm. If not specified, the uppercased domain of hostnames will be the realm.
root_principal_password_uri: Option<String>Optional. The Cloud Storage URI of a KMS encrypted file containing the root principal password.
tgt_lifetime_hours: Option<i32>Optional. The lifetime of the ticket granting ticket, in hours. If not specified, or user specifies 0, then default value 10 will be used.
truststore_password_uri: Option<String>Optional. The Cloud Storage URI of a KMS encrypted file containing the password to the user provided truststore. For the self-signed certificate, this password is generated by Dataproc.
truststore_uri: Option<String>Optional. The Cloud Storage URI of the truststore file used for SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
Trait Implementations§
Source§impl Clone for KerberosConfig
impl Clone for KerberosConfig
Source§fn clone(&self) -> KerberosConfig
fn clone(&self) -> KerberosConfig
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more