Configure Pulse for JMX with SSL

This page describes how to configure Pulse to collect JMX metrics from Hadoop services through SSL-secured RMI ports.

Ensure to encrypt all JMX configurations using theaccelo admin encrypt command.

Create Override File

Navigate to your cluster's directory and create the override.yml file (if it doesn't exist).

touch $AcceloHome_work_<clusterName>_override.yml

Configure Override.yml File

1. Open the override.yml file using a text editor:

vi $AcceloHome_work_<clusterName>_override.yml

2. Add the following configurations for the respective services, if they're not already included:

vi $AcceloHome/work/<clusterName>/override.yml

Common Configuration for All Services

jmx:
 pulsejmx_use_ssl: true 
 pulsejmx_ssl_truststore: </PATH/TO/SERVICE/TRUSTORE/FILE>
 pulsejmx_ssl_truststore_password: <SERVICE TRUSTSTORE PASSWORD>

Hive Metastore

jmx:
 hive_metastore_ssl: "true"

Hive Server

jmx:
 hive_server_ssl: "true"

Zeppelin

jmx:
 zeppelin_master_ssl: "true"

Zookeeper

jmx:
 zookeeper_server_ssl: "true"

Kafka Mirror Maker

jmx:
 kafka_mirror_master_ssl: "true"

Kafka

jmx:
 kafka_broker_ssl: "true"

Ranger

Ranger Admin

jmx: 
 ranger_admin_ssl: "true"

Ranger Tagsync

jmx: 
 ranger_tagsync_ssl: "true"

Ranger Usersync

jmx: 
 ranger_tagsync_ssl: "true"

Ranger KMS

jmx:
 ranger_kms_server_ssl: "true"

Apply the Changes

1. Save your changes to the override.yml file.

2. Run the following command to apply the changes:

accelo reconfig cluster