How to enable zookeeper ACL of Engine?

[wForget]

#1177
This PR adds kyuubi.ha.zookeeper.acl.engine.enabled configuration to turn off zookeeper ACL of Engine.

Can we specify the kyuubi server keytab file through --file so that the spark driver can access this file and turn on the zookeeper ACL of Engine.

[yaooqinn]

Yes, I am also thinking of pass it through --file to the engine side.

[yaooqinn]

would you like to give it a shot @wForget ?

[yaooqinn]

sounds good too

[wForget]

Thanks, i will try it.

[cxzl25]

If the uploaded file is a service keytab, kerberos authentication should fail?
If the uploaded file is the user's keytab, do we need to add many user acl entries to the znode?

[cxzl25]

Oh, I just saw the pr you submitted, which supports multiple authentication methods.

[wForget]

Oh, I just saw the pr you submitted, which supports multiple authentication methods.

Yes, using the service's keytab will not fail, and the zookeeper authentication keytab can be configured. In addition, the zookeeper authentication scheme of digest is added. See #1204 for details.