Support reading HDFS files with Kerberos authentication
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 38/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- hadoop
- Domain
- data-engineering, distributed-systems, security
Research direction
Start by tracing how graphscope.session() configures existing non-secure HDFS input and output, then inspect how Engine pods receive storage settings. Define how keytab, principal, and optional krb5.conf are supplied and authenticated across all pods; done means Kerberized HDFS reads and writes work alongside existing local, object-storage, and non-secure HDFS access.
Written by the indexing model from the issue text.
Description
Currently, GraphScope supports reading graph data from local files, object storage, and non-secure HDFS. However, many production Hadoop clusters require Kerberos authentication for security compliance.
When attempting to load graph data from a Kerberized HDFS (e.g., hdfs://namenode:8020/path/to/data), there is no built-in mechanism to provide Kerberos credentials (keytab, principal, krb5.conf), making it impossible to access such data sources directly.
I would like GraphScope to support reading graph data from HDFS clusters with Kerberos authentication enabled. The expected solution could include:
-
Configuration parameters in
graphscope.session()to specify Kerberos settings, e.g.:sess = graphscope.session( hdfs_kerberos_enabled=True, hdfs_kerberos_principal="user/host@REALM", hdfs_kerberos_keytab="/path/to/keytab", hdfs_krb5_conf="/etc/krb5.conf" # optional ) -
Automatic authentication before accessing HDFS files, ensuring all Engine pods can authenticate to the NameNode and DataNodes.
-
Support for both HDFS input (loading graph data) and HDFS output (storing results).
- Dominant language
- C++
- Stars
- 3.6k
- Forks
- 470
- PR merge metrics
- No merged PRs in 30d
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from alibaba/GraphScope
-
[BUG] Failed archive extraction deletes the dataset cachePossibly taken @dajiaohuang claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
alibaba/GraphScope#4674 ·
-
stale
Difficulty 5/5 Over a week Newbie friendliness 25/100
alibaba/GraphScope#4655 · 2 comments ·
-
stale
Difficulty 4/5 3-5 days Newbie friendliness 45/100
alibaba/GraphScope#4647 · 3 comments ·
-
stale
Difficulty 4/5 3-5 days Newbie friendliness 30/100
alibaba/GraphScope#4639 · 2 comments ·
-
stale
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
alibaba/GraphScope#4637 · 1 comment ·
All issues in alibaba/GraphScope
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
OpenSpace/OpenSpace#4353 · 1 comment ·
Maintainers usually reply within 5 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
macOS: a double-click on a notarized altairsim is refused, and the docs give only the offline casePossibly taken @anhaoXie claimed this today. Opendocumentation
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
mutationpp/Mutationpp#337 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
bulletphysics/bullet3#4819 ·