|
215 | 215 | fi |
216 | 216 | } |
217 | 217 |
|
| 218 | +function addSparkDefaultsSSL() { |
| 219 | + sed -i "/\# ssl/a $1" $SPARK_HOME/conf/spark-defaults.conf |
| 220 | +} |
| 221 | + |
218 | 222 | function changeWardenConfig() { |
219 | 223 | if [ -f $SPARK_HOME/warden/warden.spark-$3.conf ] ; then |
220 | 224 | sed -i "s~^$1.*~$2~" $SPARK_HOME/warden/warden.spark-$3.conf |
@@ -299,20 +303,20 @@ spark.io.encryption.keySizeBits 128 |
299 | 303 | EOF |
300 | 304 | if [ -f $SPARK_HOME/warden/warden.spark-master.conf ] ; then |
301 | 305 | changeWardenConfig "service.ui.port" "service.ui.port=$sparkMasterSecureUIPort" "master" |
302 | | - sed -i "/\# ssl/a spark.ssl.standalone.port $sparkMasterSecureUIPort" $SPARK_HOME/conf/spark-defaults.conf |
303 | | - sed -i "/\# ssl/a spark.ssl.standalone.keyStore $DEFAULT_SSL_KEYSTORE" $SPARK_HOME/conf/spark-defaults.conf |
| 306 | + addSparkDefaultsSSL "spark.ssl.standalone.port $sparkMasterSecureUIPort" |
| 307 | + addSparkDefaultsSSL "spark.ssl.standalone.keyStore $DEFAULT_SSL_KEYSTORE" |
304 | 308 | else |
305 | | - sed -i "/\# ssl/a spark.ssl.standalone.port $sparkWorkerSecureUIPort" $SPARK_HOME/conf/spark-defaults.conf |
| 309 | + addSparkDefaultsSSL "spark.ssl.standalone.port $sparkWorkerSecureUIPort" |
306 | 310 | fi |
307 | 311 | if [ -f $SPARK_HOME/warden/warden.spark-historyserver.conf ] ; then |
308 | 312 | changeWardenConfig "service.ui.port" "service.ui.port=$sparkHSSecureUIPort" "historyserver" |
309 | | - sed -i "/\# ssl/a spark.ssl.historyServer.port $sparkHSSecureUIPort" $SPARK_HOME/conf/spark-defaults.conf |
310 | | - sed -i "/\# ssl/a spark.ssl.historyServer.keyStore $DEFAULT_SSL_KEYSTORE" $SPARK_HOME/conf/spark-defaults.conf |
| 313 | + addSparkDefaultsSSL "spark.ssl.historyServer.port $sparkHSSecureUIPort" |
| 314 | + addSparkDefaultsSSL "spark.ssl.historyServer.keyStore $DEFAULT_SSL_KEYSTORE" |
311 | 315 | changeSparkDefaults "spark.yarn.historyServer.address" "spark.yarn.historyServer.address $(hostname --fqdn):$sparkHSSecureUIPort" |
312 | 316 | fi |
313 | 317 | if [ "$FIPS_ENABLED" = "1" ] ; then |
314 | | - sed -i "/\# ssl/a spark.ssl.keyStoreType bcfks" $SPARK_HOME/conf/spark-defaults.conf |
315 | | - sed -i "/\# ssl/a spark.ssl.trustStoreType bcfks" $SPARK_HOME/conf/spark-defaults.conf |
| 318 | + addSparkDefaultsSSL "spark.ssl.keyStoreType bcfks" |
| 319 | + addSparkDefaultsSSL "spark.ssl.trustStoreType bcfks" |
316 | 320 | sed -i 's/java.util=ALL-UNNAMED/java.util=ALL-UNNAMED -Djava.security.properties=\/opt\/mapr\/conf\/java.security.fips/g' ${SPARK_HOME}/conf/spark-defaults.conf |
317 | 321 | fi |
318 | 322 | if ! (echo "$CLUSTER_INFO" | grep -q "kerberosEnable=true") ; then |
|
0 commit comments