Downloading root certificates for Kubernetes environments from CDW Private Cloud

You can download the signed certificates for Hive in the Java KeyStore (JKS) format and for Impala in the PEM format from the Cloudera Data Warehouse (CDW) user interface or using the Beta CDP CLI, and use them to connect to Impala or Hive Virtual Warehouses from the BI clients such as Impala-shell, Impyla, or Beeline.

Suppose your organization uses a custom Certificate Authority (CA) to sign security certificates for Embedded Container Service (ECS) or OpenShift Container Platform (OCP) environments. In that case, you can obtain the TLS certificates for the Kubernetes environment without depending on your Administrators (DWAdmin users).