sourceforge.net/], etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists [https://hadoop -site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS [https://hadoop Deploying Kyuubi Basics Configurations Security 1. Authentication 2. Kinit Auxiliary Service 3. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations 1

sourceforge.net/], etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists [https://hadoop -site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS [https://hadoop Deploying Kyuubi Basics Configurations Security 1. Authentication 2. Kinit Auxiliary Service 3. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations 1

interface over a JDBC-to-ODBC bridge to communicate with Kyuubi. RESTful APIs It provides system management APIs, including engines, sessions, operations, and miscellaneous ones. It provides methods that end users to gain insight from the data universe and optimize data pipelines. It enables: The same user experience as an RDBMS using familiar SQL for various workloads. Extensive and secure data access Configurations Spark Configurations Flink Configurations Trino Configurations Logging Other Configurations User Defaults Deploying Kyuubi Basics Engines Security Authentication Authorization Kinit Auxiliary

sourceforge.net/], etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists [https://hadoop -site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS [https://hadoop Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations 1

sourceforge.net/], etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists [https://hadoop -site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS [https://hadoop Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers Integrations 1

interface over a JDBC-to-ODBC bridge to communicate with Kyuubi. • RESTful APIs – It provides system management APIs, including engines, sessions, operations, and miscellaneous ones. – It provides methods that users to gain insight from the data universe and optimize data pipelines. It enables: • The same user experience as an RDBMS using familiar SQL for various workloads. • Extensive and secure data access you’ve got in the step of server startup for the following JDBC URL. The case below open a session for user named apache. $ bin/beeline -u 'jdbc:hive2://localhost:10009/' -n apache Note: Use –help to display

SQuirreL SQL Client, etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists, from cluster cluster managers, e.g. Apache Hadoop YARN, Kubernetes (K8s) to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS, with permissions 7 by Apache Hive 0: jdbc:hive2://localhost:10009/> In this case, the session will create for the user named ‘anonymous’. Kyuubi will create a Spark SQL engine application using kyuubi-spark-sql-engine-

SQuirreL SQL Client, etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists, from cluster cluster managers, e.g. Apache Hadoop YARN, Kubernetes (K8s) to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS, with permissions 7 by Apache Hive 0: jdbc:hive2://localhost:10009/> In this case, the session will create for the user named ‘anonymous’. Kyuubi will create a Spark SQL engine application using kyuubi-spark-sql-engine-

sourceforge.net/], etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists [https://hadoop yarn/hadoop-yarn-site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS [https://hadoop Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers 2. Access Kerberized

sourceforge.net/], etc, to operate with Kyuubi server concurrently. The SPA policy makes sure 1) a user account can only get computing resource with managed ACLs, e.g. Queue Access Control Lists [https://hadoop yarn/hadoop-yarn-site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and metadata from a storage system, e.g. Apache Hadoop HDFS [https://hadoop Engines Security 1. Authentication 2. Kinit Auxiliary Service 3. Hadoop Credentials Manager 4. ACL Management Guide Client Documentation 1. Access Kyuubi with Hive JDBC and ODBC Drivers 2. Access Kerberized