Class: AWSCDK::StepFunctionsTasks::EMRCreateCluster::KerberosAttributesProperty

Inherits:
Jsii::Struct
  • Object
show all
Defined in:
step_functions_tasks/emr_create_cluster.rb

Overview

Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration.

See the RunJobFlow API for complete documentation on input parameters

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(realm:, ad_domain_join_password: nil, ad_domain_join_user: nil, cross_realm_trust_principal_password: nil, kdc_admin_password: nil) ⇒ KerberosAttributesProperty

Returns a new instance of KerberosAttributesProperty.

Parameters:

  • realm (String)

    The name of the Kerberos realm to which all nodes in a cluster belong.

  • ad_domain_join_password (String, nil) (defaults to: nil)

    The Active Directory password for ADDomainJoinUser.

  • ad_domain_join_user (String, nil) (defaults to: nil)

    Required only when establishing a cross-realm trust with an Active Directory domain.

  • cross_realm_trust_principal_password (String, nil) (defaults to: nil)

    Required only when establishing a cross-realm trust with a KDC in a different realm.

  • kdc_admin_password (String, nil) (defaults to: nil)

    The password used within the cluster for the kadmin service on the cluster-dedicated KDC, which maintains Kerberos principals, password policies, and keytabs for the cluster.



1946
1947
1948
1949
1950
1951
1952
1953
1954
1955
1956
1957
# File 'step_functions_tasks/emr_create_cluster.rb', line 1946

def initialize(realm:, ad_domain_join_password: nil, ad_domain_join_user: nil, cross_realm_trust_principal_password: nil, kdc_admin_password: nil)
  @realm = realm
  Jsii::Type.check_type(@realm, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "realm")
  @ad_domain_join_password = ad_domain_join_password
  Jsii::Type.check_type(@ad_domain_join_password, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "adDomainJoinPassword") unless @ad_domain_join_password.nil?
  @ad_domain_join_user = ad_domain_join_user
  Jsii::Type.check_type(@ad_domain_join_user, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "adDomainJoinUser") unless @ad_domain_join_user.nil?
  @cross_realm_trust_principal_password = cross_realm_trust_principal_password
  Jsii::Type.check_type(@cross_realm_trust_principal_password, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "crossRealmTrustPrincipalPassword") unless @cross_realm_trust_principal_password.nil?
  @kdc_admin_password = kdc_admin_password
  Jsii::Type.check_type(@kdc_admin_password, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "kdcAdminPassword") unless @kdc_admin_password.nil?
end

Instance Attribute Details

#ad_domain_join_passwordString? (readonly)

Note:

Default: No adDomainJoinPassword

The Active Directory password for ADDomainJoinUser.

Returns:

  • (String, nil)


1969
1970
1971
# File 'step_functions_tasks/emr_create_cluster.rb', line 1969

def ad_domain_join_password
  @ad_domain_join_password
end

#ad_domain_join_userString? (readonly)

Note:

Default: No adDomainJoinUser

Required only when establishing a cross-realm trust with an Active Directory domain.

A user with sufficient privileges to join resources to the domain.

Returns:

  • (String, nil)


1977
1978
1979
# File 'step_functions_tasks/emr_create_cluster.rb', line 1977

def ad_domain_join_user
  @ad_domain_join_user
end

#cross_realm_trust_principal_passwordString? (readonly)

Note:

Default: No crossRealmTrustPrincipalPassword

Required only when establishing a cross-realm trust with a KDC in a different realm.

The cross-realm principal password, which must be identical across realms.

Returns:

  • (String, nil)


1985
1986
1987
# File 'step_functions_tasks/emr_create_cluster.rb', line 1985

def cross_realm_trust_principal_password
  @cross_realm_trust_principal_password
end

#kdc_admin_passwordString? (readonly)

Note:

Default: No kdcAdminPassword

The password used within the cluster for the kadmin service on the cluster-dedicated KDC, which maintains Kerberos principals, password policies, and keytabs for the cluster.

Returns:

  • (String, nil)


1990
1991
1992
# File 'step_functions_tasks/emr_create_cluster.rb', line 1990

def kdc_admin_password
  @kdc_admin_password
end

#realmString (readonly)

The name of the Kerberos realm to which all nodes in a cluster belong.

For example, EC2.INTERNAL.

Returns:

  • (String)


1964
1965
1966
# File 'step_functions_tasks/emr_create_cluster.rb', line 1964

def realm
  @realm
end

Class Method Details

.jsii_propertiesObject



1992
1993
1994
1995
1996
1997
1998
1999
2000
# File 'step_functions_tasks/emr_create_cluster.rb', line 1992

def self.jsii_properties
  {
    :realm => "realm",
    :ad_domain_join_password => "adDomainJoinPassword",
    :ad_domain_join_user => "adDomainJoinUser",
    :cross_realm_trust_principal_password => "crossRealmTrustPrincipalPassword",
    :kdc_admin_password => "kdcAdminPassword",
  }
end

Instance Method Details

#to_jsiiObject



2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
# File 'step_functions_tasks/emr_create_cluster.rb', line 2002

def to_jsii
  result = {}
  result.merge!({
    "realm" => @realm,
    "adDomainJoinPassword" => @ad_domain_join_password,
    "adDomainJoinUser" => @ad_domain_join_user,
    "crossRealmTrustPrincipalPassword" => @cross_realm_trust_principal_password,
    "kdcAdminPassword" => @kdc_admin_password,
  })
  result.compact
end