Our team has implemented an Oozie custom action and want to deploy it using our internal frameworks (rpm based).We have implemented deployment scripts using the Cloudera Manager Python Client API (see http://cloudera.github.io/cm_api/epydoc/5.4.0/index.html), which seems to require knowing the authentication credentials that is the plaintext user name and password of the cloudera manager server at install time to construct the ApiResource (which has only one constructor), in particular, the documentation reads as follows:
__init__(self, server_host, server_port=None, username='admin', password='admin', use_tls=False, version=10)
(Constructor) | source code |
Creates a Resource object that provides API endpoints. Parameters:- server_host - The hostname of the Cloudera Manager server.
- server_port - The port of the server. Defaults to 7180 (http) or 7183 (https).
- username - Login name.
- password - Login password.
- use_tls - Whether to use tls (https).
- version - API version.
Returns: Resource object referring to the root. Overrides: object.__init__ |
Our local security team has suggested using Kerberos Keytabs for authentication (and I'm not expert at Kerberos yet). Can that approach work with the python client interface, if so how?
