Trino with Alluxio Northbound Kerberos

Slack Docker Pulls

Overview

Alluxio can work as a system cache layer of Trino (See Running Trino with Alluxio ) .

If Alluxio has the Northbound Kerberos enabled (See Setup client-side Kerberos on Alluxio cluster), the following config is required for Trino to connect to the Alluxio Cluster.

Configuration

Create a file alluxio-site.properties in one of the directory ${alluxio.conf.dir}/,${user.home}/.alluxio/,/etc/alluxio/ on each Trino node, add the following properties:

alluxio.security.authentication.type=KERBEROS
alluxio.security.authorization.permission.enabled=true
alluxio.security.kerberos.client.principal=<the principal>
alluxio.security.kerberos.client.keytab.file=<the keytab file>

Then restart the Trino cluster to pick up the new properties.