Zeppelin, Knox

Zeppelin and Knox

Zeppelin is fully supported through Knox Gateway in HDP 3.1. Make sure that the following entry is added to Knox->Configs->Advanced topology panel particularly if HDP 3.1 gas been upgraded from HDP 2.x.

            <service>
                <role>ZEPPELINUI</role>
                {{zeppelin_ui_urls}}
            </service>

            <service>
                <role>ZEPPELINWS</role>
                {{zeppelin_ws_urls}}
            </service>

Launch https://<<knox host>:8443/gateway/default/zeppelin/
It is important to keep / at the end of the URL.

Zeppelin and HTTPS

If Zeppelin is enabled for HTTPS, additional configuration is necessary. Obtain Zeppelin SSL certificate.

openssl s_client -connect <zeppelin host>:9995 -showcerts

Copy the certificate and paste it into z.crt file.
Import certificate into Java cacert keystore at the node where Knox is deployed. Usually, it is <java home dir>/jre/lib/security/cacerts file. The default password is changeit.

keytool -import -file z.crt -alias <knox host name> -keystore /etc/alternatives/jre_1.8.0/lib/security/cacerts

Restart Knox.