From bc9d27d85d4c57f8edaf116fb696e0555f7b1a97 Mon Sep 17 00:00:00 2001 From: Maxi Wittich Date: Tue, 21 Oct 2025 12:11:13 +0200 Subject: [PATCH 1/3] Adding troubleshooting for kerberos --- .../hbase/pages/troubleshooting/index.adoc | 18 ++++++++++++++++++ docs/modules/hbase/partials/nav.adoc | 1 + 2 files changed, 19 insertions(+) create mode 100644 docs/modules/hbase/pages/troubleshooting/index.adoc diff --git a/docs/modules/hbase/pages/troubleshooting/index.adoc b/docs/modules/hbase/pages/troubleshooting/index.adoc new file mode 100644 index 00000000..0ed73420 --- /dev/null +++ b/docs/modules/hbase/pages/troubleshooting/index.adoc @@ -0,0 +1,18 @@ += Troubleshooting + +== Hbase access with kerberos authentication + +Currently, xref:zookeeper-operator:index.adoc[Zookeeper] is not secured with authentication. This means, if an application tries to connect to Hbase, it would ask the zookeeper quorum to figure the correct nodes to talk to. In a Java world, you would define a `Client` which would carry the kerberos requirements. + +However, those requirements might be passed through and thus your client ( e.g. xref:spark-k8s-operator:usage-guide:operations:applications.adoc[SparkApplications] ) would try to authenticate with kerberos at the corresponding Zookeeper endpoint. This will result in a kerberos ( authentication ) error. + +To prevent this, you can set a jvm argument like ( again e.g. SparkApplications ) + +[source,yaml] +---- +jvmArgumentOverrides: + add: + - "-Dzookeeper.sasl.client=false" +---- + +in all pods which would like to talk to Hbase. \ No newline at end of file diff --git a/docs/modules/hbase/partials/nav.adoc b/docs/modules/hbase/partials/nav.adoc index 06f2167b..262bc3b1 100644 --- a/docs/modules/hbase/partials/nav.adoc +++ b/docs/modules/hbase/partials/nav.adoc @@ -25,3 +25,4 @@ ** xref:hbase:reference/discovery.adoc[] ** xref:hbase:reference/commandline-parameters.adoc[] ** xref:hbase:reference/environment-variables.adoc[] +* xref:hbase:troubleshooting/index.adoc[] From f58f37c42e91735ddd7988cbef515df7591aff4b Mon Sep 17 00:00:00 2001 From: Maxi Wittich Date: Tue, 21 Oct 2025 12:33:11 +0200 Subject: [PATCH 2/3] Updating xref references --- docs/modules/hbase/pages/troubleshooting/index.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/modules/hbase/pages/troubleshooting/index.adoc b/docs/modules/hbase/pages/troubleshooting/index.adoc index 0ed73420..63ce6ad2 100644 --- a/docs/modules/hbase/pages/troubleshooting/index.adoc +++ b/docs/modules/hbase/pages/troubleshooting/index.adoc @@ -2,9 +2,9 @@ == Hbase access with kerberos authentication -Currently, xref:zookeeper-operator:index.adoc[Zookeeper] is not secured with authentication. This means, if an application tries to connect to Hbase, it would ask the zookeeper quorum to figure the correct nodes to talk to. In a Java world, you would define a `Client` which would carry the kerberos requirements. +Currently, xref:zookeeper:index.adoc[Zookeeper] is not secured with authentication. This means, if an application tries to connect to Hbase, it would ask the zookeeper quorum to figure the correct nodes to talk to. In a Java world, you would define a `Client` which would carry the kerberos requirements. -However, those requirements might be passed through and thus your client ( e.g. xref:spark-k8s-operator:usage-guide:operations:applications.adoc[SparkApplications] ) would try to authenticate with kerberos at the corresponding Zookeeper endpoint. This will result in a kerberos ( authentication ) error. +However, those requirements might be passed through and thus your client ( e.g. xref:spark-k8s:usage-guide:operations:applications.adoc[SparkApplications] ) would try to authenticate with kerberos at the corresponding Zookeeper endpoint. This will result in a kerberos ( authentication ) error. To prevent this, you can set a jvm argument like ( again e.g. SparkApplications ) From 8d8db266224c5cf9e9ca18dda650d5e63f2276a9 Mon Sep 17 00:00:00 2001 From: Maxi Wittich Date: Tue, 21 Oct 2025 12:54:41 +0200 Subject: [PATCH 3/3] Adding newline eof --- docs/modules/hbase/pages/troubleshooting/index.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/modules/hbase/pages/troubleshooting/index.adoc b/docs/modules/hbase/pages/troubleshooting/index.adoc index 63ce6ad2..65ae6d0c 100644 --- a/docs/modules/hbase/pages/troubleshooting/index.adoc +++ b/docs/modules/hbase/pages/troubleshooting/index.adoc @@ -15,4 +15,4 @@ jvmArgumentOverrides: - "-Dzookeeper.sasl.client=false" ---- -in all pods which would like to talk to Hbase. \ No newline at end of file +in all pods which would like to talk to Hbase.