Created 03-14-2016 12:45 PM
Created 03-22-2016 12:15 AM
As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:
Created 03-21-2016 11:47 PM
Since Knox makes requests on behalf of other users, the ability to be configured as a super user that can submit requests on behalf of other users is needed and a REST API support to invoke as other users. These features existed for Oozie but were only added for Falcon in Dal-M20 (2.3.4) or later.
In the future versions of Knox, this can be enabled.
Created 03-22-2016 12:15 AM
As of HDP 2.3 (with Knox 0.6.0) -- a new extensibility mechanism was introduced which will allow you to add new REST APIs to be protected by Knox. Ideally, we will integrate Falcon and Knox as part of a future release -- so this comes out of the box, but until then --- have a look at this:
Created 03-25-2016 06:29 PM
Just to make sure everyone understands - this needs 2.3.4 of Falcon where we specifically added the ability of proxy super users