530 lines
32 KiB
JSON
530 lines
32 KiB
JSON
[
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the hue user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Hue Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_hue_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "The health test thresholds of the number of file descriptors used. Specified as a percentage of file descriptor limit.",
|
|
"display_name": "File Descriptor Monitoring Thresholds",
|
|
"name": "kms_fd_thresholds",
|
|
"value": "{\"critical\":\"70.0\",\"warning\":\"50.0\"}"
|
|
},
|
|
{
|
|
"desc": "When computing the overall Key Management Server health, consider the host's health.",
|
|
"display_name": "Key Management Server Host Health Test",
|
|
"name": "kms_host_health_enabled",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hive Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hive Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hive_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hue Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hue Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hue_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the KMS Blacklist Users parameter.",
|
|
"display_name": "Suppress Parameter Validation: KMS Blacklist Users",
|
|
"name": "role_config_suppression_kms_blacklist_users",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the httpfs superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "HttpFS Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_httpfs_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "If configured, overrides the process soft and hard rlimits (also called ulimits) for file descriptors to the configured value.",
|
|
"display_name": "Maximum Process File Descriptors",
|
|
"name": "rlimit_fds",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the CDH Version Validator configuration validator.",
|
|
"display_name": "Suppress Configuration Validator: CDH Version Validator",
|
|
"name": "role_config_suppression_cdh_version_validator",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Flume Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Flume Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_flume_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Process Status heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Process Status",
|
|
"name": "role_health_suppression_kms_kms_scm_health",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the JavaKeyStoreProvider Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: JavaKeyStoreProvider Directory",
|
|
"name": "role_config_suppression_hadoop_security_key_provider_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the mapred user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Mapred Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_mapred_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Unexpected Exits heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Unexpected Exits",
|
|
"name": "role_health_suppression_kms_kms_unexpected_exits",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the YARN Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: YARN Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_yarn_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the hdfs superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "HDFS Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_hdfs_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Port used to access the KMS' embedded Tomcat admin console.",
|
|
"display_name": "KMS Admin Port",
|
|
"name": "kms_admin_port",
|
|
"value": "16001"
|
|
},
|
|
{
|
|
"desc": "A comma-separated list of users (no spaces) for whom to disallow access to key material. These users can still fetch key metadata and create encrypted encryption keys, but are unable to do any other KMS operations. Typically, HDFS superusers will be specified here.",
|
|
"display_name": "KMS Blacklist Users",
|
|
"name": "kms_blacklist_users",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the yarn user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "YARN Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_yarn_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "The maximum size, in megabytes, per log file for Key Management Server logs. Typically used by log4j or logback.",
|
|
"display_name": "Key Management Server Max Log Size",
|
|
"name": "max_log_size",
|
|
"value": "200"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the hive user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Hive Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_hive_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "The minimum log level for Key Management Server logs",
|
|
"display_name": "Key Management Server Logging Threshold",
|
|
"name": "log_threshold",
|
|
"value": "INFO"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HTTP Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: HTTP Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_http_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The period to review when computing unexpected exits.",
|
|
"display_name": "Unexpected Exits Monitoring Period",
|
|
"name": "unexpected_exits_window",
|
|
"value": "5"
|
|
},
|
|
{
|
|
"desc": "For advanced use only, a string to be inserted into <strong>log4j.properties</strong> for this role only.",
|
|
"display_name": "Key Management Server Logging Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "log4j_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hive Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hive Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hive_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the mapred superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Mapred Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_mapred_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Maximum number of threads used to handle KMS requests.",
|
|
"display_name": "KMS Max Threads",
|
|
"name": "kms_max_threads",
|
|
"value": "250"
|
|
},
|
|
{
|
|
"desc": "For advanced use only, key-value pairs (one on each line) to be inserted into a role's environment. Applies to configurations of this role except client configuration.",
|
|
"display_name": "Key Management Server Environment Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "KMS_role_env_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the hdfs user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "HDFS Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_hdfs_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "The log directory for log files of the role Key Management Server.",
|
|
"display_name": "Key Management Server Log Directory",
|
|
"name": "log_dir",
|
|
"value": "/var/log/hadoop-kms"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server TLS/SSL Server JKS Keystore File Password parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server TLS/SSL Server JKS Keystore File Password",
|
|
"name": "role_config_suppression_ssl_server_keystore_password",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the File Descriptors heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: File Descriptors",
|
|
"name": "role_health_suppression_kms_kms_file_descriptor",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The health test thresholds on the swap memory usage of the process.",
|
|
"display_name": "Process Swap Memory Thresholds",
|
|
"name": "process_swap_memory_thresholds",
|
|
"value": "{\"critical\":\"never\",\"warning\":\"any\"}"
|
|
},
|
|
{
|
|
"desc": "The health test thresholds for unexpected exits encountered within a recent period specified by the unexpected_exits_window configuration for the role.",
|
|
"display_name": "Unexpected Exits Thresholds",
|
|
"name": "unexpected_exits_thresholds",
|
|
"value": "{\"critical\":\"any\",\"warning\":\"never\"}"
|
|
},
|
|
{
|
|
"desc": "For advanced use only. A string to be inserted into <strong>kms-acls.xml</strong> for this role only.",
|
|
"display_name": "Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-acls.xml",
|
|
"name": "kms-acls.xml_role_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Hue Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Hue Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hue_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the oozie user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Oozie Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_oozie_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HDFS Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: HDFS Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hdfs_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When set, this role's process is automatically (and transparently) restarted in the event of an unexpected failure.",
|
|
"display_name": "Automatically Restart Process",
|
|
"name": "process_auto_restart",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the httpfs user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "HttpFS Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_httpfs_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Port used by clients to interact with the KMS.",
|
|
"display_name": "KMS HTTP Port",
|
|
"name": "kms_http_port",
|
|
"value": "16000"
|
|
},
|
|
{
|
|
"desc": "Allows the oozie superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Oozie Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_oozie_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Maximum heap size of the KMS.",
|
|
"display_name": "KMS Heap Size",
|
|
"name": "kms_heap_size",
|
|
"value": "1073741824"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Swap Memory Usage heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Swap Memory Usage",
|
|
"name": "role_health_suppression_kms_kms_swap_memory_usage",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Directory where configuration and binaries are staged before starting KMS. Does not normally need to be modified.",
|
|
"display_name": "KMS Staging Directory",
|
|
"name": "kms_staging_dir",
|
|
"value": "/var/lib/hadoop-kms"
|
|
},
|
|
{
|
|
"desc": "Allows the hue superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Hue Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_hue_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "<p>The configured triggers for this role. This is a JSON formatted list of triggers. These triggers are evaluated as part as the health system. Every trigger expression is parsed, and if the trigger condition is met, the list of actions provided in the trigger expression is executed.</p><p>Each trigger has the following fields:</p><ul><li><code>triggerName</code> <strong>(mandatory)</strong> - The name of the trigger. This value must be unique for the specific role. </li><li><code>triggerExpression</code> <strong>(mandatory)</strong> - A tsquery expression representing the trigger. </li><li><code>streamThreshold</code> <strong>(optional)</strong> - The maximum number of streams that can satisfy a condition of a trigger before the condition fires. By default set to 0, and any stream returned causes the condition to fire. </li><li><code>enabled</code> <strong> (optional)</strong> - By default set to 'true'. If set to 'false', the trigger is not evaluated.</li><li><code>expressionEditorConfig</code> <strong> (optional)</strong> - Metadata for the trigger editor. If present, the trigger should only be edited from the Edit Trigger page; editing the trigger here can lead to inconsistencies.</li></ul></p><p>For example, the following JSON formatted trigger configured for a DataNode fires if the DataNode has more than 1500 file descriptors opened:</p><p><pre>[{\"triggerName\": \"sample-trigger\",\n \"triggerExpression\": \"IF (SELECT fd_open WHERE roleName=$ROLENAME and last(fd_open) > 1500) DO health:bad\",\n \"streamThreshold\": 0, \"enabled\": \"true\"}]</pre></p><p>See the trigger rules documentation for more details on how to write triggers using tsquery.</p><p>The JSON format is evolving and may change and, as a result, backward compatibility is not guaranteed between releases.</p>",
|
|
"display_name": "Role Triggers",
|
|
"name": "role_triggers",
|
|
"value": "[]"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Oozie Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Oozie Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_oozie_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the HTTP superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "HTTP Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_HTTP_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "For advanced use only. A string to be inserted into <strong>kms-site.xml</strong> for this role only.",
|
|
"display_name": "Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-site.xml",
|
|
"name": "kms-site.xml_role_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "The path to the TLS/SSL keystore file containing the server certificate and private key used for TLS/SSL. Used when Key Management Server is acting as a TLS/SSL server. The keystore must be in JKS format.",
|
|
"display_name": "Key Management Server TLS/SSL Server JKS Keystore File Location",
|
|
"name": "ssl_server_keystore_location",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Environment Advanced Configuration Snippet (Safety Valve) parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Environment Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "role_config_suppression_kms_role_env_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "For advanced use only. A string to be inserted into <strong>core-site.xml</strong> for this role only.",
|
|
"display_name": "Key Management Server Advanced Configuration Snippet (Safety Valve) for core-site.xml",
|
|
"name": "core-site.xml_role_safety_valve",
|
|
"value": null
|
|
},
|
|
{
|
|
"desc": "Allows the yarn superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "YARN Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_yarn_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Role Triggers parameter.",
|
|
"display_name": "Suppress Parameter Validation: Role Triggers",
|
|
"name": "role_config_suppression_role_triggers",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When set, Cloudera Manager will send alerts when this entity's configuration changes.",
|
|
"display_name": "Enable Configuration Change Alerts",
|
|
"name": "enable_config_alerts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HTTP Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: HTTP Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_http_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the hive superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Hive Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_hive_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the YARN Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: YARN Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_yarn_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Directory of the keystore file kms.keystore used by JavaKeyStoreProvider that backs the KMS.",
|
|
"display_name": "JavaKeyStoreProvider Directory",
|
|
"name": "hadoop_security_key_provider_dir",
|
|
"value": "/var/lib/kms"
|
|
},
|
|
{
|
|
"desc": "Enables the health test that the Key Management Server's process state is consistent with the role configuration",
|
|
"display_name": "Key Management Server Process Health Test",
|
|
"name": "kms_scm_health_enabled",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Flume Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Flume Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_flume_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "The maximum number of rolled log files to keep for Key Management Server logs. Typically used by log4j or logback.",
|
|
"display_name": "Key Management Server Maximum Log File Backups",
|
|
"name": "max_log_backup_index",
|
|
"value": "10"
|
|
},
|
|
{
|
|
"desc": "Weight for the read I/O requests issued by this role. The greater the weight, the higher the priority of the requests when the host experiences I/O contention. Must be between 100 and 1000. Defaults to 1000 for processes not managed by Cloudera Manager.",
|
|
"display_name": "Cgroup I/O Weight",
|
|
"name": "rm_io_weight",
|
|
"value": "500"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Logging Advanced Configuration Snippet (Safety Valve) parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Logging Advanced Configuration Snippet (Safety Valve)",
|
|
"name": "role_config_suppression_log4j_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Advanced Configuration Snippet (Safety Valve) for core-site.xml parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Advanced Configuration Snippet (Safety Valve) for core-site.xml",
|
|
"name": "role_config_suppression_core-site.xml_role_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the KMS Staging Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: KMS Staging Directory",
|
|
"name": "role_config_suppression_kms_staging_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the HTTP user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "HTTP Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_HTTP_hosts",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Soft memory limit to assign to this role, enforced by the Linux kernel. When the limit is reached, the kernel will reclaim pages charged to the process if and only if the host is facing memory pressure. If reclaiming fails, the kernel may kill the process. Both anonymous as well as page cache pages contribute to the limit. Use a value of -1 B to specify no limit. By default processes not managed by Cloudera Manager will have no limit.",
|
|
"display_name": "Cgroup Memory Soft Limit",
|
|
"name": "rm_memory_soft_limit",
|
|
"value": "-1"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Oozie Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Oozie Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_oozie_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HDFS Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: HDFS Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_hdfs_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HttpFS Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: HttpFS Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_httpfs_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Mapred Proxy User Groups parameter.",
|
|
"display_name": "Suppress Parameter Validation: Mapred Proxy User Groups",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_mapred_groups",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress the results of the Host Health heath test. The results of suppressed health tests are ignored when computing the overall health of the associated host, role or service, so suppressed health tests will not generate alerts.",
|
|
"display_name": "Suppress Health Test: Host Health",
|
|
"name": "role_health_suppression_kms_kms_host_health",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-acls.xml parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-acls.xml",
|
|
"name": "role_config_suppression_kms-acls.xml_role_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Encrypt communication between clients and Key Management Server using Transport Layer Security (TLS) (formerly known as Secure Socket Layer (SSL)).",
|
|
"display_name": "Enable TLS/SSL for Key Management Server",
|
|
"name": "ssl_enabled",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the HttpFS Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: HttpFS Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_httpfs_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server TLS/SSL Server JKS Keystore File Location parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server TLS/SSL Server JKS Keystore File Location",
|
|
"name": "role_config_suppression_ssl_server_keystore_location",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "When set, Cloudera Manager will send alerts when the health of this role reaches the threshold specified by the EventServer setting eventserver_health_events_alert_threshold",
|
|
"display_name": "Enable Health Alerts for this Role",
|
|
"name": "enable_alerts",
|
|
"value": "true"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Log Directory parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Log Directory",
|
|
"name": "role_config_suppression_log_dir",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Allows the flume superuser to impersonate any members of a comma-delimited list of groups. The default '*' allows all groups. To disable entirely, use a string that doesn't correspond to a group name, such as '_no_group_'.",
|
|
"display_name": "Flume Proxy User Groups",
|
|
"name": "hadoop_kms_proxyuser_flume_groups",
|
|
"value": "*"
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Mapred Proxy User Hosts parameter.",
|
|
"display_name": "Suppress Parameter Validation: Mapred Proxy User Hosts",
|
|
"name": "role_config_suppression_hadoop_kms_proxyuser_mapred_hosts",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Hard memory limit to assign to this role, enforced by the Linux kernel. When the limit is reached, the kernel will reclaim pages charged to the process. If reclaiming fails, the kernel may kill the process. Both anonymous as well as page cache pages contribute to the limit. Use a value of -1 B to specify no limit. By default processes not managed by Cloudera Manager will have no limit.",
|
|
"display_name": "Cgroup Memory Hard Limit",
|
|
"name": "rm_memory_hard_limit",
|
|
"value": "-1"
|
|
},
|
|
{
|
|
"desc": "Number of CPU shares to assign to this role. The greater the number of shares, the larger the share of the host's CPUs that will be given to this role when the host experiences CPU contention. Must be between 2 and 262144. Defaults to 1024 for processes not managed by Cloudera Manager.",
|
|
"display_name": "Cgroup CPU Shares",
|
|
"name": "rm_cpu_shares",
|
|
"value": "1024"
|
|
},
|
|
{
|
|
"desc": "The password for the Key Management Server JKS keystore file.",
|
|
"display_name": "Key Management Server TLS/SSL Server JKS Keystore File Password",
|
|
"name": "ssl_server_keystore_password",
|
|
"value": ""
|
|
},
|
|
{
|
|
"desc": "Whether to suppress configuration warnings produced by the built-in parameter validation for the Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-site.xml parameter.",
|
|
"display_name": "Suppress Parameter Validation: Key Management Server Advanced Configuration Snippet (Safety Valve) for kms-site.xml",
|
|
"name": "role_config_suppression_kms-site.xml_role_safety_valve",
|
|
"value": "false"
|
|
},
|
|
{
|
|
"desc": "Comma-delimited list of hosts where you want to allow the flume user to impersonate other users. The default '*' allows all hosts. To disable entirely, use a string that doesn't correspond to a host name, such as '_no_host'.",
|
|
"display_name": "Flume Proxy User Hosts",
|
|
"name": "hadoop_kms_proxyuser_flume_hosts",
|
|
"value": "*"
|
|
}
|
|
] |