加密集群工作節點之間的通信

# !/bin/bash集-euo pipefailkeystore_dbfs_file＝“dbfs / < keystore_directory > / jetty_ssl_driver_keystore.jks”##等待直到keystore文件通過Fuse可用max_attempts＝30.而［!- f$ {keystore_dbfs_file｝］；做如果［＂max_attempts美元＂= =0］；然後回聲"錯誤:無法找到文件:keystore_dbfs_file美元fail腳本。”退出1fi睡眠2 s（(max_attempts——）)完成從密鑰庫文件的散列派生共享節點間加密秘密sasl_secret＝$ (sha256sumkeystore_dbfs_file美元|切- d' 'f1）如果［- z＂$ {sasl_secret｝＂］；然後回聲"錯誤:無法導出秘密。腳本失敗。”退出1fi#啟用SSL/HTTPS使用的JKS密鑰庫文件local_keystore_file＝＂DB_HOME美元/鍵/ jetty_ssl_driver_keystore.jks”# JKS的keystore文件密碼。這個jks密碼是硬編碼的，不打算保護機密性密鑰庫的#。不要假定keystore文件本身是受保護的。local_keystore_password＝“gb1gQqZ9ZIHS”隻有驅動程序需要更新spark-branch.conf如果[[DB_IS_DRIVER美元＝“真正的”]]；然後driver_conf＝$ {DB_HOME｝/ conf / spark-branch.conf /驅動程序回聲“配置驅動程序conf at。driver_conf美元＂如果［!- edriver_conf美元］；然後觸摸driver_conf美元fi貓<< EOF >> $driver_conf(司機){//配置節點間認證“火花。驗證”= true“spark.authenticate。秘密”=“sasl_secret美元”//配置AES加密“spark.network.crypto.enabled”= true“spark.network.crypto.saslFallback”= false/ /配置SSL“spark.ssl。啟用“= true“spark.ssl。keyPassword " = " $ local_keystore_password "“spark.ssl。密鑰存儲庫”=“local_keystore_file美元”“spark.ssl。keyStorePassword " = " $ local_keystore_password "“spark.ssl。協議”=“TLSv1.3”“spark.ssl.standalone。啟用“= true“spark.ssl.ui。啟用“= true｝EOF回聲"成功配置驅動程序conf at .driver_conf美元＂fi#設置spark master和worker的spark-defaults.conf中的配置spark_defaults_conf＝＂DB_HOME美元/ / conf / spark-defaults.conf火花”回聲“配置spark默認conf at。spark_defaults_conf美元＂如果［!- espark_defaults_conf美元］；然後觸摸spark_defaults_conf美元fi貓<< EOF >> $spark_defaults_conf火花。驗證正確spark.authenticate.secret sasl_secret美元spark.network.crypto.enabled真實spark.network.crypto.saslFallback假spark.ssl.enabled真實spark.ssl.keyPassword local_keystore_password美元spark.ssl.keyStore local_keystore_file美元spark.ssl.keyStorePassword local_keystore_password美元spark.ssl.protocol TLSv1.3spark.ssl.standalone.enabled真實spark.ssl.ui.enabled真實EOF回聲"成功配置spark defaults conf at .spark_defaults_conf美元＂