This page describes how to configure a Kerberos-secured Hadoop cluster so that Pulse can request the NameNode API. To enable secure access, you must update the HDFS configuration.
Steps to Configure
- Add the administrator property in
hdfs-site.xml.
In the HDFS configuration, add the property dfs.cluster.administrators under Advanced or Custom hdfs-site.xml.
- Set the value to the Pulse Kerberos username.
Example:
<property> <name>dfs.cluster.administrators</name> <value>pulse-kerberos-user</value> </property>- Provide a NameNode service keytab to Pulse.
Copy the NameNode service keytab to the Pulse server. Pulse uses this keytab to authenticate with the Hadoop NameNode through Kerberos and securely collect metrics.
- Apply the updated configuration.
- Restart all the HDFS services that use the updated hdfs-site.xml (such as the NameNode and DataNodes) so they load the new property.
- Use Ambari or CM to deploy the new client configuration to all nodes. This ensures Pulse automatically picks up the changes.
Result
Pulse securely authenticates with the Kerberos-enabled Hadoop cluster and requests the NameNode API to collect required metrics.
Was this page helpful?