I have a HDP kerberized cluster with Ranger enabled, where the data is encrypted by KMS with multiple encryption zones. Users can only access data via Hive interface. In order to access all the data I can choose on of the options: 1. Give hive user an access to specific HDFS folders along with the permission to decrypt the data. However if hive user gets compromised, it will have an access to all the data. 2. Enable doAs option in Hive, and access HDFS as end user. This however will require policies for user on both: hdfs and hive and if user has an access to hdfs (for some reason) the hive permissions on column level becomes useless. What's the valid approach here? ... View more

Will Cloudbreak support Azure Managed disks for custom image catalog anytime soon? Currently using packer for building my base images for HDP, however it stores them in storage account, which is not recommended by Azure anymore and packer marked this strategy as deprecated already. ... View more

Hi, I'm using Cloudbreak 2.7.1 and I'm in a locked down environment with proxy set up. I was able to configure everything properly, cbd can talk to my cluster and the basic cluster was deployed successfully. However, that's not the case when I enable Knox Gateway on a cloudbreak level. The whole installation fails. I think it's a bug (knox is not ambari managed, so I guess it's installed in different way and it doesnt respect proxy env vars or similar) , which I don't know how to resolve. This is currently a blocker for me. ... View more