Audience: System Administrators
Content Summary: This page outlines steps to effectively disable and/or uninstall the Immuta components from your CDH cluster. The disable portions of this document detail how to deactivate the Immuta components without removing the components. For a complete uninstall, follow these steps and then proceed to remove all Immuta-related settings, configuration, and any Immuta Kerberos principals from your cluster.
These changes will require a cluster restart
The changes detailed below affect HDFS; therefore, a cluster restart is required to fully implement these changes.
The Immuta Authorization Provider must be removed from the NameNode configuration.
Navigate to the Cloudera Manager Overview page.
Click on the HDFS service.
Click on the Configuration tab.
In the search bar, enter
Click on the minus [-] sign that appears on the right of the entry corresponding to dfs.namenode.authorization.provider.class
. This will restore to the CDH default.
Click the Save Changes button at the bottom of the screen.
To uninstall, instead of only reverting the Immuta Authorization Provider, all Immuta customized settings can be removed from the NameNode configuration.
Navigate to the Cloudera Manager Overview page.
Click on the HDFS service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.
Warning
You may have non-default settings that are completely unrelated to Immuta! You may also have non-default settings that are currently related to Immuta that will need to be altered to another non-default custom setting specific to your installation. Your CDH Admins will know which settings this applies to. Do not blanket revert settings to their defaults unless you are certain the CDH defaults are appropriate for your cluster.
All settings under
can be reverted. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking the revert arrow icon to the right of HDFS (Service-Wide).
All settings under
can be reverted. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking revert arrow icon to the right of NameNode Default Group.
Click the Save Changes button at the bottom of the screen.
If fully uninstalling, Immuta's components need to be removed from YARN's classpath.
These changes will require a cluster restart
The changes detailed below affect HDFS; therefore, a cluster restart is required to fully implement these changes.
Navigate to the YARN service.
Click on the Configuration tab.
In the search bar, enter
Click on the minus [-] sign that appears on the right of any entries that reference IMMUTA
. For example, there may be records for jars such as immuta-group-mapping.jar
or immuta-hadoop-filesystem.jar
or similar.
Click the Save Changes button at the bottom of the screen.
These settings may be applied either system-wide (via core-site.xml
) or to specific target systems such as Hive or Impala. Be sure to locate all setting locations.
These changes will require a Hive service restart
The Hive service will need to be restarted for the changes below to take effect.
Navigate to the Hive service.
Click on the Configuration tab.
In the search bar, enter
Click on the minus [-] sign that appears to the right of the entry corresponding to hadoop.security.group.mapping
. This will restore to the CDH default.
Click the Save Changes button at the bottom of the screen.
Navigate to the Hive service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.
Warning
You may have non-default settings that are completely unrelated to Immuta! You may also have non-default settings that are currently related to Immuta that will need to be altered to another non-default custom setting specific to your installation. Your CDH Admins will know which settings this applies to. Do not blanket revert settings to their defaults unless you are certain the CDH defaults are appropriate for your cluster.
All settings under
can be reverted. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking the revert arrow icon to the right of HiveServer2 Default Group.
Click the Save Changes button at the bottom of the screen.
These settings may be applied either system-wide (via core-site.xml
) or to specific target systems such as Hive or Impala. Be sure to locate all setting locations.
These changes will require an Impala service restart
The Impala service will need restarted in order for the changes below to take effect.
Navigate to the Impala service.
Click on the Configuration tab.
In the search bar, enter
Click on the minus [-] sign that appears on the right of the entry corresponding to hadoop.security.group.mapping
. This will restore to the CDH default.
Click the Save Changes button at the bottom of the screen.
Navigate to the Impala service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.
Warning
You may have non-default settings that are completely unrelated to Immuta! You may also have non-default settings that are currently related to Immuta that will need to be altered to another non-default custom setting specific to your installation. Your CDH Admins will know which settings this applies to. Do not blanket revert settings to their defaults unless you are certain the CDH defaults are appropriate for your cluster.
The "immuta" proxy user from
can be removed. Simply delete the "immuta=*
" (and any leading or trailing ;
) from the -authorized_proxy_user_config=
value, leaving any other values in place. It may also be done by clicking the revert arrow icon to the right of Impala (Service-Wide) if the default is appropriate.
All settings under
can be reverted. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking the revert arrow icon to the right of Impala Daemon Default Group.
If using Kerberos principal short names was only done in support of ImmutaGroupsMapping
for use in native workspaces, that setting can also be reverted. In the search bar, enter
Simply uncheck the checkbox to the left of "Impala (Service-Wide)".
Click the Save Changes button at the bottom of the screen.
Most of the current Spark controls are now set through the IMMUTA
service and will be removed through the subsequent step of stopping and disabling that service. These instructions are primarily for legacy Spark 1.6 installs that may still contain settings from the Spark 1.6 Configuration.
These changes will require a Spark service restart
The Spark service will need to be restarted for the changes below to take effect.
Navigate to the Spark service.
Click on the Configuration tab.
In the search bar, enter
Remove any references to IMMUTA
or "immuta" in the configuration options. Particularly look for the options defined in Spark 1.6 Configuration.
Then go back to the search bar, and enter
Remove any references to IMMUTA
or "immuta" in the environment variables. Particularly look for the environment settings defined in Spark 1.6 Configuration.
Click the Save Changes button at the bottom of the screen.
If your installation leveraged the Immuta HDFS Native Workspace and ImmutaGroupsMapping
, Immuta was likely configured as a Sentry admin. When uninstalling, this can be removed.
These changes will require a Sentry service restart
The Sentry service will need to be restarted for the changes below to take effect.
Navigate to the Sentry service.
Click on the Configuration tab.
Near the bottom of the left side navigation pane, select Non-Default. This will list all settings that are not presently set to the defaults.
Warning
You may have non-default settings that are completely unrelated to Immuta! You may also have non-default settings that are currently related to Immuta that will need to be altered to another non-default custom setting specific to your installation. Your CDH Admins will know which settings this applies to. Do not blanket revert settings to their defaults unless you are certain the CDH defaults are appropriate for your cluster.
The "immuta" user can be removed from any place specified, but particularly the
should be removed. Click the minus [-] sign that appears on the right of the individual entries, or - if you are certain your cluster should operate on the CDH defaults - all settings can be reverted by clicking the revert arrow icon.
Click the Save Changes button at the bottom of the screen.
Navigate to the Cloudera Manager Overview page.
Click on the down arrow next to the IMMUTA service.
Click Stop.
Confirm that you want to stop the service.
Navigate to the Cloudera Manager Overview page.
Click on the down arrow next to the IMMUTA service.
Click Delete.
Confirm that you want to delete the service.
Complete both 1 and 2 in the previous "Disable" section.
Navigate to the Cloudera Manager Overview page.
Click on the package icon on the top right hand side of the page near the search bar.
Find the "Distributed, Activated" Immuta Parcel(s) and click the Deactivate button.
Click Confirm.
You may need to restart the cluster before you can fully remove these parcels
If the parcel was in active use, a cluster restart is likely needed before Cloudera Manager will let you do the following steps to remove and delete these parcels.
Once deactivated, go back to the Immuta Parcels(s) and select the "down arrow" beside the "Activate" button, and select Remove from Hosts.
Click Confirm.
Once not distributed, go back to the Immuta Parcels(s) and select the "down arrow" beside the "Distribute" button, and select Delete.
Click Delete.
To commit all previous settings, issue a restart of the CDH cluster.