Configure Pulse for JMX with SSL

This page describes how to configure Pulse to collect JMX metrics from Hadoop services through SSL-secured RMI ports.

Note Ensure to encrypt all JMX configurations using theaccelo admin encrypt command.

Navigate to your cluster's directory and create the override.yml file (if it doesn't exist).

touch $AcceloHome_work_<clusterName>_override.yml

vi $AcceloHome_work_<clusterName>_override.yml

Add the following configurations for the respective services, if they're not already included:

vi $AcceloHome/work/<clusterName>/override.yml

jmx: pulsejmx_use_ssl: true pulsejmx_ssl_truststore: </PATH/TO/SERVICE/TRUSTORE/FILE> pulsejmx_ssl_truststore_password: <SERVICE TRUSTSTORE PASSWORD>

jmx: hive_metastore_ssl: "true"

jmx: hive_server_ssl: "true"

jmx: zeppelin_master_ssl: "true"

jmx: zookeeper_server_ssl: "true"

jmx: kafka_mirror_master_ssl: "true"

jmx: kafka_broker_ssl: "true"

Ranger Admin

jmx: ranger_admin_ssl: "true"

Ranger Tagsync

jmx: ranger_tagsync_ssl: "true"

Ranger Usersync

jmx: ranger_tagsync_ssl: "true"

jmx: ranger_kms_server_ssl: "true"

accelo reconfig cluster

Last updated on

Was this page helpful?