Class: AWSCDK::EMR::CfnCluster::KerberosAttributesProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
emr/cfn_cluster.rb

Overview

KerberosAttributes is a property of the AWS::EMR::Cluster resource.

KerberosAttributes define the cluster-specific Kerberos configuration when Kerberos authentication is enabled using a security configuration. The cluster-specific configuration must be compatible with the security configuration. For more information see Use Kerberos Authentication in the EMR Management Guide .

See Also:

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(kdc_admin_password:, realm:, ad_domain_join_password: nil, ad_domain_join_user: nil, cross_realm_trust_principal_password: nil) ⇒ KerberosAttributesProperty

Returns a new instance of KerberosAttributesProperty.

Parameters:

  • kdc_admin_password (String) —

    The password used within the cluster for the kadmin service on the cluster-dedicated KDC, which maintains Kerberos principals, password policies, and keytabs for the cluster.

  • realm (String) —

    The name of the Kerberos realm to which all nodes in a cluster belong.

  • ad_domain_join_password (String, nil) (defaults to: nil) —

    The Active Directory password for ADDomainJoinUser .

  • ad_domain_join_user (String, nil) (defaults to: nil) —

    Required only when establishing a cross-realm trust with an Active Directory domain.

  • cross_realm_trust_principal_password (String, nil) (defaults to: nil) —

    Required only when establishing a cross-realm trust with a KDC in a different realm.



2168
2169
2170
2171
2172
2173
2174
2175
2176
2177
2178
2179
 
# File 'emr/cfn_cluster.rb', line 2168

def initialize(kdc_admin_password:, realm:, ad_domain_join_password: nil, ad_domain_join_user: nil, cross_realm_trust_principal_password: nil)
  @kdc_admin_password = kdc_admin_password
  Jsii::Type.check_type(@kdc_admin_password, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "kdcAdminPassword")
  @realm = realm
  Jsii::Type.check_type(@realm, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "realm")
  @ad_domain_join_password = ad_domain_join_password
  Jsii::Type.check_type(@ad_domain_join_password, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "adDomainJoinPassword") unless @ad_domain_join_password.nil?
  @ad_domain_join_user = ad_domain_join_user
  Jsii::Type.check_type(@ad_domain_join_user, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "adDomainJoinUser") unless @ad_domain_join_user.nil?
  @cross_realm_trust_principal_password = cross_realm_trust_principal_password
  Jsii::Type.check_type(@cross_realm_trust_principal_password, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "crossRealmTrustPrincipalPassword") unless @cross_realm_trust_principal_password.nil?
end

Instance Attribute Details

#ad_domain_join_password ⇒ String? (readonly)

The Active Directory password for ADDomainJoinUser .

Returns:

  • (String, nil)

See Also:



2197
2198
2199
 
# File 'emr/cfn_cluster.rb', line 2197

def ad_domain_join_password
  @ad_domain_join_password
end

#ad_domain_join_user ⇒ String? (readonly)

Required only when establishing a cross-realm trust with an Active Directory domain.

A user with sufficient privileges to join resources to the domain.

Returns:

  • (String, nil)

See Also:



2204
2205
2206
 
# File 'emr/cfn_cluster.rb', line 2204

def ad_domain_join_user
  @ad_domain_join_user
end

#cross_realm_trust_principal_password ⇒ String? (readonly)

Required only when establishing a cross-realm trust with a KDC in a different realm.

The cross-realm principal password, which must be identical across realms.

Returns:

  • (String, nil)

See Also:



2211
2212
2213
 
# File 'emr/cfn_cluster.rb', line 2211

def cross_realm_trust_principal_password
  @cross_realm_trust_principal_password
end

#kdc_admin_password ⇒ String (readonly)

The password used within the cluster for the kadmin service on the cluster-dedicated KDC, which maintains Kerberos principals, password policies, and keytabs for the cluster.

Returns:

  • (String)

See Also:



2185
2186
2187
 
# File 'emr/cfn_cluster.rb', line 2185

def kdc_admin_password
  @kdc_admin_password
end

#realm ⇒ String (readonly)

The name of the Kerberos realm to which all nodes in a cluster belong.

For example, EC2.INTERNAL .

Returns:

  • (String)

See Also:



2192
2193
2194
 
# File 'emr/cfn_cluster.rb', line 2192

def realm
  @realm
end

Class Method Details

.jsii_properties ⇒ Object 



2213
2214
2215
2216
2217
2218
2219
2220
2221
 
# File 'emr/cfn_cluster.rb', line 2213

def self.jsii_properties
  {
    :kdc_admin_password => "kdcAdminPassword",
    :realm => "realm",
    :ad_domain_join_password => "adDomainJoinPassword",
    :ad_domain_join_user => "adDomainJoinUser",
    :cross_realm_trust_principal_password => "crossRealmTrustPrincipalPassword",
  }
end

Instance Method Details

#to_jsii ⇒ Object 



2223
2224
2225
2226
2227
2228
2229
2230
2231
2232
2233
 
# File 'emr/cfn_cluster.rb', line 2223

def to_jsii
  result = {}
  result.merge!({
    "kdcAdminPassword" => @kdc_admin_password,
    "realm" => @realm,
    "adDomainJoinPassword" => @ad_domain_join_password,
    "adDomainJoinUser" => @ad_domain_join_user,
    "crossRealmTrustPrincipalPassword" => @cross_realm_trust_principal_password,
  })
  result.compact
end