Page History

...

The discovery service must be authenticated by at least some of the service registries (e.g., Ambari). We need to define the means by which credentials are configured for this service in Knox.

6.1 Ambari

HTTP Basic authentication is supported by Ambari, so the Ambari service discovery implementation can leverage the Knox Alias service to obtain the necessary credentials at discovery time.

The username can be specified in a descriptor, using the discovery-user property. The default user name can also be mapped to the alias ambari.discovery.user.

Similarly, the password alias can be specified in a descriptor, using the discovery-pwd-alias property. By default, the Ambari service discovery will lookup the ambari.discovery.password alias to get the password.

So, there are two ways to specify the username for Ambari interaction:

1. Provision the alias mapping using the knoxcli.sh script
   
   bin/knoxcli.sh create-alias ambari.discovery.user --value ambariuser
   
   
2. Specify the discovery-user property in a descriptor
   
   "discovery-user":"ambariuser"

And, two ways to specify the associated password:

1. Provision the password mapped to the default alias, ambari.discovery.password
   
   bin/knoxcli.sh create-alias ambari.discovery.password --value ambaripasswd
   
   
2. Provision a different alias, and specify it in the descriptor
   
   "discovery-pwd-alias":"my.ambari.discovery.password.alias"