Authentication
To connect
a cluster to ADLS with OAuth, you must configure the Hadoop CredentialProvider or core-site.xml
directly. Although configuring the
core-site.xml
is convenient, it is
insecure, because the contents of
core-site.xml
configuration file are not encrypted. For this reason, Cloudera
recommends using a credential provider. For more information, see
Configuring OAuth in CDH
.
You can also pass the credentials by providing them on the Sqoop command line as part of the import command.
sqoop import
-Dfs.azure.account.auth.type=...
-Dfs.azure.account.oauth.provider.type=...
-Dfs.azure.account.oauth2.client.endpoint=...
-Dfs.azure.account.oauth2.client.id=...
-Dfs.azure.account.oauth2.client.secret=...
For example:
sqoop import
-Dfs.azure.account.oauth2.client.endpoint=https://login.microsoftonline.com/$TENANT_ID/oauth2/token
-Dfs.azure.account.oauth2.client.id=$CLIENT_ID
-Dfs.azure.account.oauth2.client.secret=$CLIENT_SECRET
-Dfs.azure.account.auth.type=OAuth
-Dfs.azure.account.oauth.provider.type=org.apache.hadoop.fs.azurebfs.oauth2.ClientCredsTokenProvider