Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Why falcon reset api does not integrate with knox?

avatar
New Contributor
 
1 ACCEPTED SOLUTION

avatar
Contributor

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_n...

View solution in original post

3 REPLIES 3

avatar
Expert Contributor

Since Knox makes requests on behalf of other users, the ability to be configured as a super user that can submit requests on behalf of other users is needed and a REST API support to invoke as other users. These features existed for Oozie but were only added for Falcon in Dal-M20 (2.3.4) or later.

In the future versions of Knox, this can be enabled.

avatar
Contributor

As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_Knox_Gateway_Admin_Guide/content/adding_n...

avatar
Expert Contributor

Just to make sure everyone understands - this needs 2.3.4 of Falcon where we specifically added the ability of proxy super users