Support Questions

Find answers, ask questions, and share your expertise

Why falcon reset api does not integrate with knox?

avatar
New Contributor
 
1 ACCEPTED SOLUTION

avatar
Contributor

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_n...

View solution in original post

3 REPLIES 3

avatar
Expert Contributor

Since Knox makes requests on behalf of other users, the ability to be configured as a super user that can submit requests on behalf of other users is needed and a REST API support to invoke as other users. These features existed for Oozie but were only added for Falcon in Dal-M20 (2.3.4) or later.

In the future versions of Knox, this can be enabled.

avatar
Contributor

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_n...

avatar
Expert Contributor

Just to make sure everyone understands - this needs 2.3.4 of Falcon where we specifically added the ability of proxy super users