Configuring a secure Kudu cluster using Cloudera Manager
You can configure a secure Kudu cluster using Cloudera Manager. For that you need enabled Kerberos authentication and RPC encryption, configure coarse-grained authorization, and configure HTTPS encryption. Optionally you can configure custom Kerberos principal, TLS/SSL encryption or fine-grained authorization using Ranger.
Enabling Kerberos authentication and RPC encryption Configuring custom Kerberos principal for Kudu Configuring coarse-grained authorization with ACLs Superuser Access Control List and the User Access Control List. The Superuser ACL is the list of all the superusers that can access the cluster. User-level access can be controlled by using the User ACL. By default, all the users can access the clusters. But when you enable authentication using Kerberos, only the users who are able to authenticate successfully can access the cluster.Configuring TLS/SSL encryption for Kudu using Cloudera Manager Enabling Ranger authorization Configuring HTTPS encryption Configuring data at rest encryption 