HIVE KERBEROS
Stores a Kerberos principal and keytab for a Hive metastore.
HIVE KERBEROS is the seventh and last entry in the Secret Type dropdown and it's available at all three scopes: User, Workspace and Tenant. Reach for it when your Hive metastore sits inside a Kerberos realm, which is the usual arrangement in established on-premises Hadoop estates where authentication is centralised rather than configured per service.
The keytab is what distinguishes this from HIVE BASIC. A keytab holds the principal's long-term key, so a cluster can obtain tickets unattended instead of prompting somebody for a password, and that's precisely what a scheduled job running at three in the morning needs.
We validate the pair before anything depends on it.
Basic Details
Common to every secret type:
| Field | Required | Control | Placeholder / default |
|---|---|---|---|
| Secret Name | Yes | text | title_example_user_secret_1 |
| Secret Type | Yes | dropdown | select HIVE KERBEROS |
| Workspace | Yes | dropdown | Workspace scope only |
| Description | No | textarea | Enter Description |
Secret Details
| Field | Required | Control | Placeholder |
|---|---|---|---|
| Principal | Yes | text | e.g., hive/hostname@REALM.COM |
| Keytab | Yes | file upload (upload button) | — |
| Metastore | No | dropdown | Select Metastore |
Validate and Metastore
- Validate is available for this type, and stays disabled until Principal and Keytab are provided.
- This is one of the three types that expose the optional Metastore dropdown. See Secret Validation.
