638 lines
38 KiB
JSON
638 lines
38 KiB
JSON
[
|
|
{
|
|
"desc": "Allows the oozie superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Oozie Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_oozie_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether or not periodic stacks collection is enabled.",
|
|
"display_name": "Stacks Collection Enabled",
|
|
"name": "stacks_collection_enabled",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Mapred Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Mapred Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_mapred_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-site.xml parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-site.xml",
|
|
"name": "role_config_suppression_kms-site.xml_role_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Oozie Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Oozie Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_oozie_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the File Descriptors heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: File Descriptors",
|
|
"name": "role_health_suppression_kms_kms_file_descriptor",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The method used to collect stacks. The jstack option involves periodically running the jstack command against the role's daemon process. The servlet method is available for those roles that have an HTTP server endpoint exposing the current stacks traces of all threads. When the servlet method is selected, that HTTP endpoint is periodically scraped.",
|
|
"display_name": "Stacks Collection Method",
|
|
"name": "stacks_collection_method",
|
|
"value": "jstack"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Audit Pipeline Test heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Audit Pipeline Test",
|
|
"name": "role_health_suppression_kms_kms_audit_health",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Enables the health test that the Key Management Server's process state is consistent with the role configuration",
|
|
"display_name": "Key Management Server Process Health Test",
|
|
"name": "kms_scm_health_enabled",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "For advanced use only. A string to be inserted into <strong>kms-acls.xml</strong> for this role only.",
|
|
"display_name": "Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-acls.xml",
|
|
"name": "kms-acls.xml_role_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Swap Memory Usage heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Swap Memory Usage",
|
|
"name": "role_health_suppression_kms_kms_swap_memory_usage",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Environment Advanced Configuration Snippet (Safety Valve) parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Environment Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "role_config_suppression_kms_role_env_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The period to review when computing unexpected exits.",
|
|
"display_name": "Unexpected Exits Monitoring Period",
|
|
"name": "unexpected_exits_window",
|
|
"value": "5"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server TLS/SSL Server JKS Keystore File Password parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server TLS/SSL Server JKS Keystore File Password",
|
|
"name": "role_config_suppression_ssl_server_keystore_password",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Flume Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Flume Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_flume_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Heap Dump Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: Heap Dump Directory",
|
|
"name": "role_config_suppression_oom_heap_dump_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the yarn superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "YARN Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_yarn_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Unexpected Exits heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Unexpected Exits",
|
|
"name": "role_health_suppression_kms_kms_unexpected_exits",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When set, Cloudera Manager will send alerts when this entity's configuration changes.",
|
|
"display_name": "Enable Configuration Change Alerts",
|
|
"name": "enable_config_alerts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Log Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Log Directory",
|
|
"name": "role_config_suppression_log_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When set, generates heap dump file when java.lang.OutOfMemoryError is thrown.",
|
|
"display_name": "Dump Heap When Out of Memory",
|
|
"name": "oom_heap_dump_enabled",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Mapred Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Mapred Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_mapred_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The path to the TLS/SSL keystore file containing the server certificate and private key used for TLS/SSL. Used when Key Management Server is acting as a TLS/SSL server. The keystore must be in JKS format.",
|
|
"display_name": "Key Management Server TLS/SSL Server JKS Keystore File Location",
|
|
"name": "ssl_server_keystore_location",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Directory of the keystore file kms.keystore used by JavaKeyStoreProvider that backs the KMS.",
|
|
"display_name": "JavaKeyStoreProvider Directory",
|
|
"name": "hadoop_security_key_provider_dir",
|
|
"value": "/var/lib/kms"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Stacks Collection Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: Stacks Collection Directory",
|
|
"name": "role_config_suppression_stacks_collection_directory",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Maximum heap size of the KMS.",
|
|
"display_name": "KMS Heap Size",
|
|
"name": "kms_heap_size",
|
|
"value": "1073741824"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the oozie user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Oozie Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_oozie_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "<p>The number of threads to be used to accept connections. Increase this value on a multi CPU machine, although you would never really need more than 2. Also, with a lot of non keep alive connections, you might want to increase this value as well.</p><p>This setting only works with Tomcat's NIO handler protocol.</p><p>This configuration is only supported in CDH 5.11 and up.</p>",
|
|
"display_name": "KMS Acceptor Thread Count",
|
|
"name": "kms_acceptor_thread_count",
|
|
"value": "1"
|
|
},
|
|
{
|
|
"desc": "The maximum size, in megabytes, per log file for Key Management Server logs. Typically used by log4j or logback.",
|
|
"display_name": "Key Management Server Max Log Size",
|
|
"name": "max_log_size",
|
|
"value": "200"
|
|
},
|
|
{
|
|
"desc": "<p>The configured triggers for this role. This is a JSON-formatted list of triggers. These triggers are evaluated as part as the health system. Every trigger expression is parsed, and if the trigger condition is met, the list of actions provided in the trigger expression is executed.</p><p>Each trigger has the following fields:</p><ul><li><code>triggerName</code> <b>(mandatory)</b> - The name of the trigger. This value must be unique for the specific role. </li><li><code>triggerExpression</code> <b>(mandatory)</b> - A tsquery expression representing the trigger. </li><li><code>streamThreshold</code> <b>(optional)</b> - The maximum number of streams that can satisfy a condition of a trigger before the condition fires. By default set to 0, and any stream returned causes the condition to fire. </li><li><code>enabled</code> <b> (optional)</b> - By default set to 'true'. If set to 'false', the trigger is not evaluated.</li><li><code>expressionEditorConfig</code> <b> (optional)</b> - Metadata for the trigger editor. If present, the trigger should only be edited from the Edit Trigger page; editing the trigger here can lead to inconsistencies.</li></ul><p>For example, the following JSON formatted trigger configured for a DataNode fires if the DataNode has more than 1500 file descriptors opened:</p><p><pre>[{\"triggerName\": \"sample-trigger\",\n \"triggerExpression\": \"IF (SELECT fd_open WHERE roleName=$ROLENAME and last(fd_open) > 1500) DO health:bad\",\n \"streamThreshold\": 0, \"enabled\": \"true\"}]</pre></p><p>See the trigger rules documentation for more details on how to write triggers using tsquery.</p><p>The JSON format is evolving and may change and, as a result, backward compatibility is not guaranteed between releases.</p>",
|
|
"display_name": "Role Triggers",
|
|
"name": "role_triggers",
|
|
"value": "[]"
|
|
},
|
|
{
|
|
"desc": "These arguments will be passed as part of the Java command line. Commonly, garbage collection flags, PermGen, or extra debugging flags would be passed here.",
|
|
"display_name": "Additional Java Configuration Options for KMS",
|
|
"name": "kms_java_opts",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Allows the hdfs superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "HDFS Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_hdfs_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the YARN Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: YARN Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_yarn_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The log directory for log files of the role Key Management Server.",
|
|
"display_name": "Key Management Server Log Directory",
|
|
"name": "log_dir",
|
|
"value": "/var/log/hadoop-kms"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the hue user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Hue Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_hue_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "The amount of stacks data that is retained. After the retention limit is reached, the oldest data is deleted.",
|
|
"display_name": "Stacks Collection Data Retention",
|
|
"name": "stacks_collection_data_retention",
|
|
"value": "104857600"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the hive user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Hive Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_hive_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Oozie Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Oozie Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_oozie_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the flume user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Flume Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_flume_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Port used to access the KMS' embedded Tomcat admin console.",
|
|
"display_name": "KMS Admin Port",
|
|
"name": "kms_admin_port",
|
|
"value": "16001"
|
|
},
|
|
{
|
|
"desc": "The health test thresholds for unexpected exits encountered within a recent period specified by the unexpected_exits_window configuration for the role.",
|
|
"display_name": "Unexpected Exits Thresholds",
|
|
"name": "unexpected_exits_thresholds",
|
|
"value": "{\"critical\":\"any\",\"warning\":\"never\"}"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Flume Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Flume Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_flume_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "For advanced use only. A string to be inserted into <strong>core-site.xml</strong> for this role only.",
|
|
"display_name": "Key Management Server Advanced Configuration Snippet (Safety Valve) for core-site.xml",
|
|
"name": "core-site.xml_role_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Allows the flume superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Flume Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_flume_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Number of CPU shares to assign to this role. The greater the number of shares, the larger the share of the host's CPUs that will be given to this role when the host experiences CPU contention. Must be between 2 and 262144. Defaults to 1024 for processes not managed by Cloudera Manager.",
|
|
"display_name": "Cgroup CPU Shares",
|
|
"name": "rm_cpu_shares",
|
|
"value": "1024"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server TLS/SSL Server JKS Keystore File Location parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server TLS/SSL Server JKS Keystore File Location",
|
|
"name": "role_config_suppression_ssl_server_keystore_location",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the YARN Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: YARN Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_yarn_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The minimum log level for Key Management Server logs",
|
|
"display_name": "Key Management Server Logging Threshold",
|
|
"name": "log_threshold",
|
|
"value": "INFO"
|
|
},
|
|
{
|
|
"desc": "The health test thresholds of the number of file descriptors used. Specified as a percentage of file descriptor limit.",
|
|
"display_name": "File Descriptor Monitoring Thresholds",
|
|
"name": "kms_fd_thresholds",
|
|
"value": "{\"critical\":\"70.0\",\"warning\":\"50.0\"}"
|
|
},
|
|
{
|
|
"desc": "Allows the mapred superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Mapred Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_mapred_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HTTP Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: HTTP Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_http_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HDFS Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: HDFS Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hdfs_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the yarn user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "YARN Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_yarn_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "When set, this role's process is automatically (and transparently) restarted in the event of an unexpected failure.",
|
|
"display_name": "Automatically Restart Process",
|
|
"name": "process_auto_restart",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Logging Advanced Configuration Snippet (Safety Valve) parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Logging Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "role_config_suppression_log4j_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hue Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hue Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hue_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the HTTP user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "HTTP Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_HTTP_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the CDH Version Validator configuration validator.",
|
|
"display_name": "Suppress Configuration Validator: CDH Version Validator",
|
|
"name": "role_config_suppression_cdh_version_validator",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Hard memory limit to assign to this role, enforced by the Linux kernel. When the limit is reached, the kernel will reclaim pages charged to the process. If reclaiming fails, the kernel may kill the process. Both anonymous as well as page cache pages contribute to the limit. Use a value of -1 B to specify no limit. By default processes not managed by Cloudera Manager will have no limit.",
|
|
"display_name": "Cgroup Memory Hard Limit",
|
|
"name": "rm_memory_hard_limit",
|
|
"value": "-1"
|
|
},
|
|
{
|
|
"desc": "<p>The maximum queue length for incoming connection requests when all possible request processing threads are in use. Any requests received when the queue is full will be refused.</p><p>This configuration is only supported in CDH 5.11 and up.</p>",
|
|
"display_name": "KMS Accept Count",
|
|
"name": "kms_accept_count",
|
|
"value": "500"
|
|
},
|
|
{
|
|
"desc": "Encrypt communication between clients and Key Management Server using Transport Layer Security (TLS) (formerly known as Secure Socket Layer (SSL)).",
|
|
"display_name": "Enable TLS/SSL for Key Management Server",
|
|
"name": "ssl_enabled",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The health test thresholds on the swap memory usage of the process.",
|
|
"display_name": "Process Swap Memory Thresholds",
|
|
"name": "process_swap_memory_thresholds",
|
|
"value": "{\"critical\":\"never\",\"warning\":\"any\"}"
|
|
},
|
|
{
|
|
"desc": "For advanced use only, key-value pairs (one on each line) to be inserted into a role's environment. Applies to configurations of this role except client configuration.",
|
|
"display_name": "Key Management Server Environment Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "KMS_role_env_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HTTP Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: HTTP Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_http_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "If configured, overrides the process soft and hard rlimits (also called ulimits) for file descriptors to the configured value.",
|
|
"display_name": "Maximum Process File Descriptors",
|
|
"name": "rlimit_fds",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-acls.xml parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-acls.xml",
|
|
"name": "role_config_suppression_kms-acls.xml_role_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the KMS Staging Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: KMS Staging Directory",
|
|
"name": "role_config_suppression_kms_staging_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When computing the overall Key Management Server health, consider the host's health.",
|
|
"display_name": "Key Management Server Host Health Test",
|
|
"name": "kms_host_health_enabled",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "A comma-separated list of users (no spaces) for whom to disallow access to key material. These users can still fetch key metadata and create encrypted encryption keys, but are unable to do any other KMS operations. Typically, HDFS superusers will be specified here.",
|
|
"display_name": "KMS Blacklist Users",
|
|
"name": "kms_blacklist_users",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Allows the httpfs superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "HttpFS Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_httpfs_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Path to directory where heap dumps are generated when java.lang.OutOfMemoryError error is thrown. This directory is automatically created if it does not exist. If this directory already exists, role user must have write access to this directory. If this directory is shared among multiple roles, it should have 1777 permissions. The heap dump files are created with 600 permissions and are owned by the role user. The amount of free space in this directory should be greater than the maximum Java Process heap size configured for this role.",
|
|
"display_name": "Heap Dump Directory",
|
|
"name": "oom_heap_dump_dir",
|
|
"value": "/tmp"
|
|
},
|
|
{
|
|
"desc": "The frequency with which stacks are collected.",
|
|
"display_name": "Stacks Collection Frequency",
|
|
"name": "stacks_collection_frequency",
|
|
"value": "5.0"
|
|
},
|
|
{
|
|
"desc": "Allows the HTTP superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "HTTP Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_HTTP_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "When set, Cloudera Manager will send alerts when the health of this role reaches the threshold specified by the EventServer setting eventserver_health_events_alert_threshold",
|
|
"display_name": "Enable Health Alerts for this Role",
|
|
"name": "enable_alerts",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hive Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hive Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hive_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HDFS Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: HDFS Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hdfs_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the mapred user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Mapred Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_mapred_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the httpfs user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "HttpFS Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_httpfs_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Maximum number of threads used to handle KMS requests.",
|
|
"display_name": "KMS Max Threads",
|
|
"name": "kms_max_threads",
|
|
"value": "250"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HttpFS Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: HttpFS Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_httpfs_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "For advanced use only, a string to be inserted into <strong>log4j.properties</strong> for this role only.",
|
|
"display_name": "Key Management Server Logging Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "log4j_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "<p>The Tomcat handler protocol. The default HTTP/1.1 handler is a thread-per-request model.</p><p>This configuration is only supported in CDH 5.11 and up.</p>",
|
|
"display_name": "KMS Handler Protocol",
|
|
"name": "kms_protocol",
|
|
"value": "HTTP/1.1"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Host Health heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Host Health",
|
|
"name": "role_health_suppression_kms_kms_host_health",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Port used by clients to interact with the KMS.",
|
|
"display_name": "KMS HTTP Port",
|
|
"name": "kms_http_port",
|
|
"value": "16000"
|
|
},
|
|
{
|
|
"desc": "The maximum number of rolled log files to keep for Key Management Server logs. Typically used by log4j or logback.",
|
|
"display_name": "Key Management Server Maximum Log File Backups",
|
|
"name": "max_log_backup_index",
|
|
"value": "10"
|
|
},
|
|
{
|
|
"desc": "Allows the hive superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Hive Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_hive_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Soft memory limit to assign to this role, enforced by the Linux kernel. When the limit is reached, the kernel will reclaim pages charged to the process if and only if the host is facing memory pressure. If reclaiming fails, the kernel may kill the process. Both anonymous as well as page cache pages contribute to the limit. Use a value of -1 B to specify no limit. By default processes not managed by Cloudera Manager will have no limit.",
|
|
"display_name": "Cgroup Memory Soft Limit",
|
|
"name": "rm_memory_soft_limit",
|
|
"value": "-1"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the hdfs user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "HDFS Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_hdfs_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Cloudera Manager agent monitors each service and each of its role by publishing metrics to the Cloudera Manager Service Monitor. Setting it to false will stop Cloudera Manager agent from publishing any metric for corresponding service/roles. This is usually helpful for services that generate large amount of metrics which Service Monitor is not able to process.",
|
|
"display_name": "Enable Metric Collection",
|
|
"name": "process_should_monitor",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HttpFS Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: HttpFS Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_httpfs_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Role Triggers parameter.",
|
|
"display_name": "Suppress Parameter Validation: Role Triggers",
|
|
"name": "role_config_suppression_role_triggers",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the hue superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Hue Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_hue_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Process Status heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Process Status",
|
|
"name": "role_health_suppression_kms_kms_scm_health",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When set, a SIGKILL signal is sent to the role process when java.lang.OutOfMemoryError is thrown.",
|
|
"display_name": "Kill When Out of Memory",
|
|
"name": "oom_sigkill_enabled",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "For advanced use only. A string to be inserted into <strong>kms-site.xml</strong> for this role only.",
|
|
"display_name": "Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-site.xml",
|
|
"name": "kms-site.xml_role_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hive Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hive Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hive_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Advanced Configuration Snippet (Safety Valve) for core-site.xml parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Advanced Configuration Snippet (Safety Valve) for core-site.xml",
|
|
"name": "role_config_suppression_core-site.xml_role_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The password for the Key Management Server JKS keystore file.",
|
|
"display_name": "Key Management Server TLS/SSL Server JKS Keystore File Password",
|
|
"name": "ssl_server_keystore_password",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the KMS Blacklist Users parameter.",
|
|
"display_name": "Suppress Parameter Validation: KMS Blacklist Users",
|
|
"name": "role_config_suppression_kms_blacklist_users",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Directory where configuration and binaries are staged before starting KMS. Does not normally need to be modified.",
|
|
"display_name": "KMS Staging Directory",
|
|
"name": "kms_staging_dir",
|
|
"value": "/var/lib/hadoop-kms"
|
|
},
|
|
{
|
|
"desc": "The directory in which stacks logs are placed. If not set, stacks are logged into a <code>stacks</code> subdirectory of the role's log directory.",
|
|
"display_name": "Stacks Collection Directory",
|
|
"name": "stacks_collection_directory",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Weight for the read I/O requests issued by this role. The greater the weight, the higher the priority of the requests when the host experiences I/O contention. Must be between 100 and 1000. Defaults to 1000 for processes not managed by Cloudera Manager.",
|
|
"display_name": "Cgroup I/O Weight",
|
|
"name": "rm_io_weight",
|
|
"value": "500"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hue Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hue Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hue_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the JavaKeyStoreProvider Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: JavaKeyStoreProvider Directory",
|
|
"name": "role_config_suppression_hadoop_security_key_provider_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the KMS Acceptor Thread Count parameter.",
|
|
"display_name": "Suppress Parameter Validation: KMS Acceptor Thread Count",
|
|
"name": "role_config_suppression_kms_acceptor_thread_count",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Additional Java Configuration Options for KMS parameter.",
|
|
"display_name": "Suppress Parameter Validation: Additional Java Configuration Options for KMS",
|
|
"name": "role_config_suppression_kms_java_opts",
|
|
"value": "false"
|
|
}
|
|
] |