Skip to content

Commit ccb2106

Browse files
authored
docs: Improve Kerberos docs slightly (#455)
* docs: Improve Kerberos docs slightly * fix space
1 parent 1e4f5a2 commit ccb2106

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

docs/modules/hdfs/pages/usage-guide/security.adoc

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ To configure HDFS to use Kerberos you first need to collect information about yo
1212
Additionally you need a service-user, which the secret-operator uses to create create principals for the HDFS services.
1313

1414
=== 2. Create Kerberos SecretClass
15-
Afterwards you need to enter all the needed information into a SecretClass, as described in xref:home:secret-operator:secretclass.adoc#backend-kerberoskeytab[secret-operator documentation].
15+
Afterwards you need to enter all the needed information into a SecretClass, as described in xref:home:secret-operator:secretclass.adoc#backend-kerberoskeytab[secret-operator documentation].
1616
The following guide assumes you have named your SecretClass `kerberos-hdfs`.
1717

1818
=== 3. Configure HDFS to use SecretClass
@@ -33,7 +33,7 @@ The `kerberos.secretClass` is used to give HDFS the possibility to request keyta
3333
The `tlsSecretClass` is needed to request TLS certificates, used e.g. for the Web UIs.
3434

3535

36-
=== 4. Verify that Kerberos is used
36+
=== 4. Verify that Kerberos authentication is required
3737
Use `stackablectl stacklet list` to get the endpoints where the HDFS namenodes are reachable.
3838
Open the link (note that the namenode is now using https).
3939
You should see a Web UI similar to the following:
@@ -74,5 +74,5 @@ spec:
7474
----
7575

7676
== Wire encryption
77-
In case kerberos is enabled, `Privacy` mode is used for best security.
78-
Wire encryption without kerberos as well as https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-common/SecureMode.html#Data_confidentiality[other wire encryption modes] are *not* supported.
77+
In case Kerberos is enabled, `Privacy` mode is used for best security.
78+
Wire encryption without Kerberos as well as https://hadoop.apache.org/docs/stable/hadoop-project-dist/hadoop-common/SecureMode.html#Data_confidentiality[other wire encryption modes] are *not* supported.

0 commit comments

Comments
 (0)