Disable/Uninstall Cloudera Hadoop

Audience: System Administrators
Content Summary: This page outlines steps to effectively disable and/or uninstall the Immuta components from your CDH cluster. The disable portions of this document detail how to deactivate the Immuta components without removing the components. For a complete uninstall, follow these steps and then proceed to remove all Immuta-related settings, configuration, and any Immuta Kerberos principals from your cluster.

NameNode

These changes will require a cluster restart

The changes detailed below affect HDFS; therefore, a cluster restart is required to fully implement these changes.

Steps to Disable

The Immuta Authorization Provider must be removed from the NameNode configuration.

Navigate to the Cloudera Manager Overview page.
Click on the HDFS service.
Click on the Configuration tab.

In the search bar, enter

dfs.namenode.authorization.provider.class

Click on the minus [-] sign that appears on the right of the entry corresponding to dfs.namenode.authorization.provider.class. This will restore to the CDH default.
Click the Save Changes button at the bottom of the screen.

Steps to Uninstall

To uninstall, instead of only reverting the Immuta Authorization Provider, all Immuta customized settings can be removed from the NameNode configuration.

Navigate to the Cloudera Manager Overview page.
Click on the HDFS service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.

Warning

You may have non-default settings that are completely unrelated to Immuta! You may also have non-default settings that are currently related to Immuta that will need to be altered to another non-default custom setting specific to your installation. Your CDH Admins will know which settings this applies to. Do not blanket revert settings to their defaults unless you are certain the CDH defaults are appropriate for your cluster.

All settings under

Cluster-wide Advanced Configuration Snippet (Safety Valve) for core-site.xml

can be reverted. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking the revert arrow icon to the right of HDFS (Service-Wide).

All settings under

NameNode Advanced Configuration Snippet (Safety Valve) for hdfs-site.xml

can be reverted. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking revert arrow icon to the right of NameNode Default Group.

Click the Save Changes button at the bottom of the screen.

YARN

If fully uninstalling, Immuta's components need to be removed from YARN's classpath.

These changes will require a cluster restart

The changes detailed below affect HDFS; therefore, a cluster restart is required to fully implement these changes.

Steps to Uninstall

Navigate to the YARN service.
Click on the Configuration tab.
In the search bar, enter
```
yarn.application.classpath
```
Click on the minus [-] sign that appears on the right of any entries that reference IMMUTA. For example, there may be records for jars such as immuta-group-mapping.jar or immuta-hadoop-filesystem.jar or similar.
Click the Save Changes button at the bottom of the screen.

Hive

These settings may be applied either system-wide (via core-site.xml) or to specific target systems such as Hive or Impala. Be sure to locate all setting locations.

These changes will require a Hive service restart

The Hive service will need to be restarted for the changes below to take effect.

Steps to Disable

Navigate to the Hive service.
Click on the Configuration tab.

In the search bar, enter

Hive Service Advanced Configuration Snippet (Safety Valve) for core-site.xml

Click on the minus [-] sign that appears to the right of the entry corresponding to hadoop.security.group.mapping. This will restore to the CDH default.
Click the Save Changes button at the bottom of the screen.

Steps to Uninstall

Navigate to the Hive service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.

Warning

All settings under

HiveServer2 Advanced Configuration Snippet (Safety Valve) for core-site.xml

Click the Save Changes button at the bottom of the screen.

Impala

These settings may be applied either system-wide (via core-site.xml) or to specific target systems such as Hive or Impala. Be sure to locate all setting locations.

These changes will require an Impala service restart

The Impala service will need restarted in order for the changes below to take effect.

Steps to Disable

Navigate to the Impala service.
Click on the Configuration tab.

In the search bar, enter

Impala Daemon Advanced Configuration Snippet (Safety Valve) for core-site.xml

Click on the minus [-] sign that appears on the right of the entry corresponding to hadoop.security.group.mapping. This will restore to the CDH default.
Click the Save Changes button at the bottom of the screen.

Steps to Uninstall

Navigate to the Impala service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.

Warning

The "immuta" proxy user from

Impala Command Line Argument Advanced Configuration Snippet (Safety Valve)

can be removed. Simply delete the "immuta=*" (and any leading or trailing ;) from the -authorized_proxy_user_config= value, leaving any other values in place. It may also be done by clicking the revert arrow icon to the right of Impala (Service-Wide) if the default is appropriate.

All settings under

Impala Daemon Advanced Configuration Snippet (Safety Valve) for core-site.xml

If using Kerberos principal short names was only done in support of ImmutaGroupsMapping for use in native workspaces, that setting can also be reverted. In the search bar, enter

load_auth_to_local_rules

Simply uncheck the checkbox to the left of "Impala (Service-Wide)".

Click the Save Changes button at the bottom of the screen.

Spark

Most of the current Spark controls are now set through the IMMUTA service and will be removed through the subsequent step of stopping and disabling that service. These instructions are primarily for legacy Spark 1.6 installs that may still contain settings from the Spark 1.6 Configuration.

These changes will require a Spark service restart

The Spark service will need to be restarted for the changes below to take effect.

Steps to Uninstall

Navigate to the Spark service.
Click on the Configuration tab.

In the search bar, enter

Spark Client Advanced Configuration Snippet (Safety Valve) for spark-conf/spark-defaults.conf

Remove any references to IMMUTA or "immuta" in the configuration options. Particularly look for the options defined in Spark 1.6 Configuration.

Then go back to the search bar, and enter

Spark Client Advanced Configuration Snippet (Safety Valve) for spark-conf/spark-env.sh

Remove any references to IMMUTA or "immuta" in the environment variables. Particularly look for the environment settings defined in Spark 1.6 Configuration.
Click the Save Changes button at the bottom of the screen.

Sentry

If your installation leveraged the Immuta HDFS Native Workspace and ImmutaGroupsMapping, Immuta was likely configured as a Sentry admin. When uninstalling, this can be removed.

These changes will require a Sentry service restart

The Sentry service will need to be restarted for the changes below to take effect.

Steps to Uninstall

Navigate to the Sentry service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.

Warning

The "immuta" user can be removed from any place specified, but particularly the

sentry.service.admin.group

should be removed. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking the revert arrow icon.

Click the Save Changes button at the bottom of the screen.

Immuta Immuta Partition/"Vulcan" Service

Steps to Disable

1 - Stop the Immuta Partition/"Vulcan" Service

Navigate to the Cloudera Manager Overview page.
Click on the down arrow next to the IMMUTA service.
Click Stop.
Confirm that you want to stop the service.

2 - Remove the Immuta Service

Navigate to the Cloudera Manager Overview page.
Click on the down arrow next to the IMMUTA service.
Click Delete.
Confirm that you want to delete the service.

Steps to Uninstall

Complete both 1 and 2 in the previous "Disable" section.

3 - Deactivate and Remove the Immuta Parcel

Navigate to the Cloudera Manager Overview page.
Click on the package icon on the top right hand side of the page near the search bar.
Find the "Distributed, Activated" Immuta Parcel(s) and click the Deactivate button.
Click Confirm.

You may need to restart the cluster before you can fully remove these parcels

If the parcel was in active use, a cluster restart is likely needed before Cloudera Manager will let you do the following steps to remove and delete these parcels.

Once deactivated, go back to the Immuta Parcels(s) and select the "down arrow" beside the "Activate" button, and select Remove from Hosts.
Click Confirm.
Once not distributed, go back to the Immuta Parcels(s) and select the "down arrow" beside the "Distribute" button, and select Delete.
Click Delete.

Restart the Cluster

To commit all previous settings, issue a restart of the CDH cluster.

PreviousUpgrade Cloudera Hadoop NextLog Analysis Tool