Required. The Cloud Storage URI of a KMS encrypted file
containing the root principal password.
Optional. The Cloud Storage URI of the keystore file used for
SSL encryption. If not provided, Dataproc will provide a self-
signed certificate.
Optional. The Cloud Storage URI of a KMS encrypted file
containing the password to the user provided keystore. For the
self-signed certificate, this password is generated by
Dataproc.
Optional. The Cloud Storage URI of a KMS encrypted file
containing the password to the user provided truststore. For
the self-signed certificate, this password is generated by
Dataproc.
Optional. The KDC (IP or hostname) for the remote trusted
realm in a cross realm trust relationship.
Optional. The Cloud Storage URI of a KMS encrypted file
containing the shared password between the on-cluster Kerberos
realm and the remote trusted realm, in a cross realm trust
relationship.
Optional. The lifetime of the ticket granting ticket, in
hours. If not specified, or user specifies 0, then default
value 10 will be used.