AMBARI-20939. HDP 3.0 TP - create service definition for Kafka with configs, kerberos, widgets, etc.(vbrodetskyi)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/3817ad5d Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/3817ad5d Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/3817ad5d Branch: refs/heads/trunk Commit: 3817ad5da2076a274ca9fa4674b6d9d704610cb2 Parents: 1aad067 Author: Vitaly Brodetskyi <[email protected]> Authored: Fri May 5 17:09:30 2017 +0300 Committer: Vitaly Brodetskyi <[email protected]> Committed: Fri May 5 17:09:30 2017 +0300 ---------------------------------------------------------------------- .../KAFKA/0.10.0.3.0/alerts.json | 32 ++ .../0.10.0.3.0/configuration/kafka-broker.xml | 569 +++++++++++++++++++ .../0.10.0.3.0/configuration/kafka-env.xml | 111 ++++ .../0.10.0.3.0/configuration/kafka-log4j.xml | 170 ++++++ .../configuration/kafka_client_jaas_conf.xml | 41 ++ .../configuration/kafka_jaas_conf.xml | 59 ++ .../configuration/ranger-kafka-audit.xml | 130 +++++ .../ranger-kafka-plugin-properties.xml | 148 +++++ .../ranger-kafka-policymgr-ssl.xml | 66 +++ .../configuration/ranger-kafka-security.xml | 64 +++ .../KAFKA/0.10.0.3.0/kerberos.json | 76 +++ .../KAFKA/0.10.0.3.0/metainfo.xml | 109 ++++ .../KAFKA/0.10.0.3.0/metrics.json | 239 ++++++++ .../KAFKA/0.10.0.3.0/package/scripts/kafka.py | 276 +++++++++ .../0.10.0.3.0/package/scripts/kafka_broker.py | 151 +++++ .../KAFKA/0.10.0.3.0/package/scripts/params.py | 341 +++++++++++ .../0.10.0.3.0/package/scripts/service_check.py | 65 +++ .../package/scripts/setup_ranger_kafka.py | 90 +++ .../0.10.0.3.0/package/scripts/status_params.py | 26 + .../KAFKA/0.10.0.3.0/package/scripts/upgrade.py | 78 +++ .../KAFKA/0.10.0.3.0/package/scripts/utils.py | 38 ++ .../templates/input.config-kafka.json.j2 | 92 +++ .../0.10.0.3.0/package/templates/kafka.conf.j2 | 35 ++ .../package/templates/kafka_client_jaas.conf.j2 | 29 + .../package/templates/kafka_jaas.conf.j2 | 41 ++ .../package/templates/tools-log4j.properties.j2 | 21 + .../KAFKA/0.10.0.3.0/role_command_order.json | 7 + .../KAFKA/0.10.0.3.0/widgets.json | 182 ++++++ .../stacks/HDP/3.0/services/KAFKA/metainfo.xml | 27 + 29 files changed, 3313 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/alerts.json ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/alerts.json b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/alerts.json new file mode 100644 index 0000000..04fb583 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/alerts.json @@ -0,0 +1,32 @@ +{ + "KAFKA": { + "service": [], + "KAFKA_BROKER": [ + { + "name": "kafka_broker_process", + "label": "Kafka Broker Process", + "description": "This host-level alert is triggered if the Kafka Broker cannot be determined to be up.", + "interval": 1, + "scope": "HOST", + "source": { + "type": "PORT", + "uri": "{{kafka-broker/listeners}}", + "default_port": 6667, + "reporting": { + "ok": { + "text": "TCP OK - {0:.3f}s response on port {1}" + }, + "warning": { + "text": "TCP OK - {0:.3f}s response on port {1}", + "value": 1.5 + }, + "critical": { + "text": "Connection failed: {0} to {1}:{2}", + "value": 5.0 + } + } + } + } + ] + } +} http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-broker.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-broker.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-broker.xml new file mode 100644 index 0000000..b62b986 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-broker.xml @@ -0,0 +1,569 @@ +<?xml version="1.0"?> +<?xml-stylesheet type="text/xsl" href="configuration.xsl"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration xmlns:xi="http://www.w3.org/2001/XInclude"; supports_final="true"> + <property> + <name>log.dirs</name> + <value>/kafka-logs</value> + <description> + A comma-separated list of one or more directories in which Kafka data is stored. + Each new partition that is created will be placed in the directory which currently has the fewest partitions. + </description> + <value-attributes> + <type>directories</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>port</name> + <value>6667</value> + <description> + The port on which the server accepts client connections. + </description> + <value-attributes> + <type>int</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>zookeeper.connect</name> + <value>localhost:2181</value> + <description> + Zookeeper also allows you to add a "chroot" path which will make all kafka data for this cluster appear under a particular path. + This is a way to setup multiple Kafka clusters or other applications on the same zookeeper cluster. To do this give a connection + string in the form hostname1:port1,hostname2:port2,hostname3:port3/chroot/path which would put all this cluster's data under the + path /chroot/path. Note that consumers must use the same connection string. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>message.max.bytes</name> + <value>1000000</value> + <description> + The maximum size of a message that the server can receive. + It is important that this property be in sync with the maximum fetch size your consumers use or + else an unruly producer will be able to publish messages too large for consumers to consume. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>num.network.threads</name> + <value>3</value> + <description> + The number of network threads that the server uses for handling network requests. + You probably don't need to change this. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>num.io.threads</name> + <value>8</value> + <description> + The number of I/O threads that the server uses for executing requests. You should have at least as many threads as you have disks. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>queued.max.requests</name> + <value>500</value> + <description>The number of requests that can be queued up for processing by the I/O threads before the network threads stop reading in new requests.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>socket.send.buffer.bytes</name> + <value>102400</value> + <description> + The SO_SNDBUFF buffer the server prefers for socket connections. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>socket.receive.buffer.bytes</name> + <value>102400</value> + <description> + The SO_RCVBUFF buffer the server prefers for socket connections. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>socket.request.max.bytes</name> + <value>104857600</value> + <description> + The maximum request size the server will allow. This prevents the server from running out of memory and should be smaller than the Java heap size. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>num.partitions</name> + <value>1</value> + <description> + The default number of partitions per topic. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.segment.bytes</name> + <value>1073741824</value> + <description> + The maximum request size the server will allow. + This prevents the server from running out of memory and should be smaller than the Java heap size. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.roll.hours</name> + <value>168</value> + <description> + This setting will force Kafka to roll a new log segment even if the log.segment.bytes size has not been reached. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.retention.bytes</name> + <value>-1</value> + <description> + The amount of data to retain in the log for each topic-partitions. Note that this is the limit per-partition so multiply by the number of partitions to get the total data retained for the topic. Also note that if both log.retention.hours and log.retention.bytes are both set we delete a segment when either limit is exceeded. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.retention.hours</name> + <value>168</value> + <description> + The number of hours to keep a log segment before it is deleted, i.e. the default data retention window for all topics. Note that if both log.retention.hours and log.retention.bytes are both set we delete a segment when either limit is exceeded. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.cleanup.interval.mins</name> + <value>10</value> + <description>The frequency in minutes that the log cleaner checks whether any log segment is eligible for deletion to meet the retention policies. + </description> + <deleted>true</deleted> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.retention.check.interval.ms</name> + <value>600000</value> + <description> + The frequency in milliseconds that the log cleaner checks whether any log segment is eligible for deletion to meet the retention policies. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.index.size.max.bytes</name> + <value>10485760</value> + <description> + The maximum size in bytes we allow for the offset index for each log segment. Note that we will always pre-allocate a + sparse file with this much space and shrink it down when the log rolls. If the index fills up we will roll a new log segment + even if we haven't reached the log.segment.bytes limit. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>log.index.interval.bytes</name> + <value>4096</value> + <description> + The byte interval at which we add an entry to the offset index. When executing a fetch request the server must do a linear scan for up to this many bytes to find the correct position in the log to begin and end the fetch. So setting this value to be larger will mean larger index files (and a bit more memory usage) but less scanning. However the server will never add more than one index entry per log append (even if more than log.index.interval worth of messages are appended). In general you probably don't need to mess with this value. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>auto.create.topics.enable</name> + <value>true</value> + <description> + Enable auto creation of topic on the server. If this is set to true then attempts to produce, consume, or fetch metadata for a non-existent topic will automatically create it with the default replication factor and number of partitions. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controller.socket.timeout.ms</name> + <value>30000</value> + <description>The socket timeout for commands from the partition management controller to the replicas.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controller.message.queue.size</name> + <value>10</value> + <description>The buffer size for controller-to-broker-channels</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>default.replication.factor</name> + <value>1</value> + <description>The default replication factor for automatically created topics.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.lag.time.max.ms</name> + <value>10000</value> + <description>If a follower hasn't sent any fetch requests for this window of time, the leader will remove the follower from ISR (in-sync replicas) and treat it as dead.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.lag.max.messages</name> + <value>4000</value> + <description> + If a replica falls more than this many messages behind the leader, the leader will remove the follower from ISR and treat it as dead. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.socket.timeout.ms</name> + <value>30000</value> + <description>The socket timeout for network requests to the leader for replicating data.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.socket.receive.buffer.bytes</name> + <value>65536</value> + <description>The socket receive buffer for network requests to the leader for replicating data.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.fetch.max.bytes</name> + <value>1048576</value> + <description>The number of byes of messages to attempt to fetch for each partition in the fetch requests the replicas send to the leader.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.fetch.wait.max.ms</name> + <value>500</value> + <description>The maximum amount of time to wait time for data to arrive on the leader in the fetch requests sent by the replicas to the leader.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.fetch.min.bytes</name> + <value>1</value> + <description>Minimum bytes expected for each fetch response for the fetch requests from the replica to the leader. If not enough bytes, wait up to replica.fetch.wait.max.ms for this many bytes to arrive. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>num.replica.fetchers</name> + <value>1</value> + <description> + Number of threads used to replicate messages from leaders. Increasing this value can increase the degree of I/O parallelism in the follower broker. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>replica.high.watermark.checkpoint.interval.ms</name> + <value>5000</value> + <description>The frequency with which each replica saves its high watermark to disk to handle recovery.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>fetch.purgatory.purge.interval.requests</name> + <value>10000</value> + <description>The purge interval (in number of requests) of the fetch request purgatory.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>producer.purgatory.purge.interval.requests</name> + <value>10000</value> + <description>The purge interval (in number of requests) of the producer request purgatory.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>zookeeper.session.timeout.ms</name> + <value>30000</value> + <description>Zookeeper session timeout. If the server fails to heartbeat to zookeeper within this period of time it is considered dead. If you set this too low the server may be falsely considered dead; if you set it too high it may take too long to recognize a truly dead server.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>zookeeper.connection.timeout.ms</name> + <value>25000</value> + <description>The maximum amount of time that the client waits to establish a connection to zookeeper.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>zookeeper.sync.time.ms</name> + <value>2000</value> + <description>How far a ZK follower can be behind a ZK leader.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controlled.shutdown.max.retries</name> + <value>3</value> + <description>Number of retries to complete the controlled shutdown successfully before executing an unclean shutdown.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controlled.shutdown.retry.backoff.ms</name> + <value>5000</value> + <description> + Backoff time between shutdown retries. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.metrics.reporters</name> + <value/> + <description> + kafka ganglia metrics reporter and kafka timeline metrics reporter + </description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.ganglia.metrics.reporter.enabled</name> + <value>true</value> + <description> + kafka ganglia metrics reporter enable + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.ganglia.metrics.host</name> + <value>localhost</value> + <description> Ganglia host </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.ganglia.metrics.port</name> + <value>8671</value> + <description> Ganglia port </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.ganglia.metrics.group</name> + <value>kafka</value> + <description>Ganglia group name </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.reporter.enabled</name> + <value>true</value> + <description>Kafka timeline metrics reporter enable</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.hosts</name> + <value>{{ams_collector_hosts}}</value> + <description>Timeline host</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.port</name> + <value>{{metric_collector_port}}</value> + <description>Timeline port</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.protocol</name> + <value>{{metric_collector_protocol}}</value> + <description>Timeline protocol(http or https)</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.truststore.path</name> + <value>{{metric_truststore_path}}</value> + <description>Location of the trust store file.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.truststore.type</name> + <value>{{metric_truststore_type}}</value> + <description>Optional. Default value is "jks".</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.truststore.password</name> + <value>{{metric_truststore_password}}</value> + <description>Password to open the trust store file.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.reporter.sendInterval</name> + <value>5900</value> + <description>Timeline metrics reporter send interval</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.instanceId</name> + <value>{{cluster_name}}</value> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.set.instanceId</name> + <value>{{set_instanceId}}</value> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka.timeline.metrics.maxRowCacheSize</name> + <value>10000</value> + <description>Timeline metrics reporter send interval</description> + <on-ambari-upgrade add="false"/> + </property> + + + + <property> + <name>listeners</name> + <value>PLAINTEXT://localhost:6667</value> + <description>host and port where kafka broker will be accepting connections. localhost will be substituted with hostname.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controlled.shutdown.enable</name> + <value>true</value> + <description>Enable controlled shutdown of the broker. If enabled, the broker will move all leaders on it to some other brokers before shutting itself down. This reduces the unavailability window during shutdown.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>auto.leader.rebalance.enable</name> + <value>true</value> + <description>Enables auto leader balancing. A background thread checks and triggers leader balance if required at regular intervals</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>num.recovery.threads.per.data.dir</name> + <value>1</value> + <description>The number of threads per data directory to be used for log recovery at startup and flushing at shutdown</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>min.insync.replicas</name> + <value>1</value> + <description>define the minimum number of replicas in ISR needed to satisfy a produce request with required.acks=-1 (or all)</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>leader.imbalance.per.broker.percentage</name> + <value>10</value> + <description>The ratio of leader imbalance allowed per broker. The controller would trigger a leader balance if it goes above this value per broker. The value is specified in percentage.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>leader.imbalance.check.interval.seconds</name> + <value>300</value> + <description>The frequency with which the partition rebalance check is triggered by the controller</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offset.metadata.max.bytes</name> + <value>4096</value> + <description>The maximum size for a metadata entry associated with an offset commit</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.load.buffer.size</name> + <value>5242880</value> + <description>Batch size for reading from the offsets segments when loading offsets into the cache.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.topic.replication.factor</name> + <value>3</value> + <description>The replication factor for the offsets topic (set higher to ensure availability). + To ensure that the effective replication factor of the offsets topic is the configured value, + the number of alive brokers has to be at least the replication factor at the time of the + first request for the offsets topic. If not, either the offsets topic creation will fail or it will get a replication factor of min(alive brokers, configured replication factor).</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.topic.num.partitions</name> + <value>50</value> + <description>The number of partitions for the offset commit topic (should not change after deployment)</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.topic.segment.bytes</name> + <value>104857600</value> + <description>The offsets topic segment bytes should be kept relatively small in order to facilitate faster log compaction and cache loads</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.topic.compression.codec</name> + <value>0</value> + <description>Compression codec for the offsets topic - compression may be used to achieve \"atomic\" commits. Default is NoCompression. For Gzip add value 1 , SnappyCompression add value 2, LZ4CompressionCodec 3. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.retention.minutes</name> + <value>86400000</value> + <description>Log retention window in minutes for offsets topic</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.retention.check.interval.ms</name> + <value>600000</value> + <description>Frequency at which to check for stale offsets</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.commit.timeout.ms</name> + <value>5000</value> + <description>Offset commit will be delayed until all replicas for the offsets topic receive the commit or this timeout is reached. This is similar to the producer request timeout.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>offsets.commit.required.acks</name> + <value>-1</value> + <description>The required acks before the commit can be accepted. In general, the default (-1) should not be overridden</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>delete.topic.enable</name> + <value>false</value> + <description>Enables delete topic. Delete topic through the admin tool will have no effect if this config is turned off</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>compression.type</name> + <description>Specify the final compression type for a given topic. This configuration accepts the standard compression codecs ('gzip', 'snappy', lz4). It additionally accepts 'uncompressed' which is equivalent to no compression; and 'producer' which means retain the original compression codec set by the producer.</description> + <value>producer</value> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>external.kafka.metrics.exclude.prefix</name> + <value>kafka.network.RequestMetrics,kafka.server.DelayedOperationPurgatory,kafka.server.BrokerTopicMetrics.BytesRejectedPerSec</value> + <description> + Exclude metrics starting with these prefixes from being collected. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>external.kafka.metrics.include.prefix</name> + <value>kafka.network.RequestMetrics.ResponseQueueTimeMs.request.OffsetCommit.98percentile,kafka.network.RequestMetrics.ResponseQueueTimeMs.request.Offsets.95percentile,kafka.network.RequestMetrics.ResponseSendTimeMs.request.Fetch.95percentile,kafka.network.RequestMetrics.RequestsPerSec.request</value> + <description> + These metrics would be included even if the exclude prefix omits them. + </description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>authorizer.class.name</name> + <description> + Kafka authorizer class + </description> + <depends-on> + <property> + <type>ranger-kafka-plugin-properties</type> + <name>ranger-kafka-plugin-enabled</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-env.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-env.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-env.xml new file mode 100644 index 0000000..90ba1c8 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-env.xml @@ -0,0 +1,111 @@ +<?xml version="1.0"?> +<?xml-stylesheet type="text/xsl" href="configuration.xsl"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration supports_adding_forbidden="true"> + <property> + <name>kafka_user</name> + <display-name>Kafka User</display-name> + <value>kafka</value> + <property-type>USER</property-type> + <description/> + <value-attributes> + <type>user</type> + <overridable>false</overridable> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_keytab</name> + <description>Kafka keytab path</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_principal_name</name> + <description>Kafka principal name</description> + <property-type>KERBEROS_PRINCIPAL</property-type> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_log_dir</name> + <value>/var/log/kafka</value> + <description/> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_pid_dir</name> + <value>/var/run/kafka</value> + <display-name>Kafka PID dir</display-name> + <description/> + <value-attributes> + <type>directory</type> + <editable-only-at-install>true</editable-only-at-install> + <overridable>false</overridable> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_user_nofile_limit</name> + <value>128000</value> + <description>Max open files limit setting for KAFKA user.</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_user_nproc_limit</name> + <value>65536</value> + <description>Max number of processes limit setting for KAFKA user.</description> + <on-ambari-upgrade add="false"/> + </property> + <!-- kafka-env.sh --> + <property> + <name>content</name> + <display-name>kafka-env template</display-name> + <description>This is the jinja template for kafka-env.sh file</description> + <value> +#!/bin/bash + +# Set KAFKA specific environment variables here. + +# The java implementation to use. +export JAVA_HOME={{java64_home}} +export PATH=$PATH:$JAVA_HOME/bin +export PID_DIR={{kafka_pid_dir}} +export LOG_DIR={{kafka_log_dir}} +export KAFKA_KERBEROS_PARAMS={{kafka_kerberos_params}} +# Add kafka sink to classpath and related depenencies +if [ -e "/usr/lib/ambari-metrics-kafka-sink/ambari-metrics-kafka-sink.jar" ]; then + export CLASSPATH=$CLASSPATH:/usr/lib/ambari-metrics-kafka-sink/ambari-metrics-kafka-sink.jar + export CLASSPATH=$CLASSPATH:/usr/lib/ambari-metrics-kafka-sink/lib/* +fi +if [ -f /etc/kafka/conf/kafka-ranger-env.sh ]; then +. /etc/kafka/conf/kafka-ranger-env.sh +fi + </value> + <value-attributes> + <type>content</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>is_supported_kafka_ranger</name> + <value>true</value> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-log4j.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-log4j.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-log4j.xml new file mode 100644 index 0000000..6ae1a6a --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka-log4j.xml @@ -0,0 +1,170 @@ +<?xml version="1.0"?> +<?xml-stylesheet type="text/xsl" href="configuration.xsl"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration supports_final="false" supports_adding_forbidden="false"> + <property> + <name>kafka_log_maxfilesize</name> + <value>256</value> + <description>The maximum size of backup file before the log is rotated</description> + <display-name>Kafka Log: backup file size</display-name> + <value-attributes> + <unit>MB</unit> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>kafka_log_maxbackupindex</name> + <value>20</value> + <description>The number of backup files</description> + <display-name>Kafka Log: # of backup files</display-name> + <value-attributes> + <type>int</type> + <minimum>0</minimum> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controller_log_maxfilesize</name> + <value>256</value> + <description>The maximum size of backup file before the log is rotated</description> + <display-name>Kafka Controller Log: backup file size</display-name> + <value-attributes> + <unit>MB</unit> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>controller_log_maxbackupindex</name> + <value>20</value> + <description>The number of backup files</description> + <display-name>Kafka Controller Log: # of backup files</display-name> + <value-attributes> + <type>int</type> + <minimum>0</minimum> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>content</name> + <display-name>kafka-log4j template</display-name> + <description>Custom log4j.properties</description> + <value> +# +# +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. +# +# +# +kafka.logs.dir=logs + +log4j.rootLogger=INFO, stdout + +log4j.appender.stdout=org.apache.log4j.ConsoleAppender +log4j.appender.stdout.layout=org.apache.log4j.PatternLayout +log4j.appender.stdout.layout.ConversionPattern=[%d] %p %m (%c)%n + +log4j.appender.kafkaAppender=org.apache.log4j.DailyRollingFileAppender +log4j.appender.kafkaAppender.DatePattern='.'yyyy-MM-dd-HH +log4j.appender.kafkaAppender.File=${kafka.logs.dir}/server.log +log4j.appender.kafkaAppender.layout=org.apache.log4j.PatternLayout +log4j.appender.kafkaAppender.layout.ConversionPattern=[%d] %p %m (%c)%n +log4j.appender.kafkaAppender.MaxFileSize = {{kafka_log_maxfilesize}}MB +log4j.appender.kafkaAppender.MaxBackupIndex = {{kafka_log_maxbackupindex}} + +log4j.appender.stateChangeAppender=org.apache.log4j.DailyRollingFileAppender +log4j.appender.stateChangeAppender.DatePattern='.'yyyy-MM-dd-HH +log4j.appender.stateChangeAppender.File=${kafka.logs.dir}/state-change.log +log4j.appender.stateChangeAppender.layout=org.apache.log4j.PatternLayout +log4j.appender.stateChangeAppender.layout.ConversionPattern=[%d] %p %m (%c)%n + +log4j.appender.requestAppender=org.apache.log4j.DailyRollingFileAppender +log4j.appender.requestAppender.DatePattern='.'yyyy-MM-dd-HH +log4j.appender.requestAppender.File=${kafka.logs.dir}/kafka-request.log +log4j.appender.requestAppender.layout=org.apache.log4j.PatternLayout +log4j.appender.requestAppender.layout.ConversionPattern=[%d] %p %m (%c)%n + +log4j.appender.cleanerAppender=org.apache.log4j.DailyRollingFileAppender +log4j.appender.cleanerAppender.DatePattern='.'yyyy-MM-dd-HH +log4j.appender.cleanerAppender.File=${kafka.logs.dir}/log-cleaner.log +log4j.appender.cleanerAppender.layout=org.apache.log4j.PatternLayout +log4j.appender.cleanerAppender.layout.ConversionPattern=[%d] %p %m (%c)%n + +log4j.appender.controllerAppender=org.apache.log4j.DailyRollingFileAppender +log4j.appender.controllerAppender.DatePattern='.'yyyy-MM-dd-HH +log4j.appender.controllerAppender.File=${kafka.logs.dir}/controller.log +log4j.appender.controllerAppender.layout=org.apache.log4j.PatternLayout +log4j.appender.controllerAppender.layout.ConversionPattern=[%d] %p %m (%c)%n +log4j.appender.controllerAppender.MaxFileSize = {{controller_log_maxfilesize}}MB +log4j.appender.controllerAppender.MaxBackupIndex = {{controller_log_maxbackupindex}} +# Turn on all our debugging info +#log4j.logger.kafka.producer.async.DefaultEventHandler=DEBUG, kafkaAppender +#log4j.logger.kafka.client.ClientUtils=DEBUG, kafkaAppender +#log4j.logger.kafka.perf=DEBUG, kafkaAppender +#log4j.logger.kafka.perf.ProducerPerformance$ProducerThread=DEBUG, kafkaAppender +#log4j.logger.org.I0Itec.zkclient.ZkClient=DEBUG +log4j.logger.kafka=INFO, kafkaAppender +log4j.logger.kafka.network.RequestChannel$=WARN, requestAppender +log4j.additivity.kafka.network.RequestChannel$=false + +#log4j.logger.kafka.network.Processor=TRACE, requestAppender +#log4j.logger.kafka.server.KafkaApis=TRACE, requestAppender +#log4j.additivity.kafka.server.KafkaApis=false +log4j.logger.kafka.request.logger=WARN, requestAppender +log4j.additivity.kafka.request.logger=false + +log4j.logger.kafka.controller=TRACE, controllerAppender +log4j.additivity.kafka.controller=false + +log4j.logger.kafka.log.LogCleaner=INFO, cleanerAppender +log4j.additivity.kafka.log.LogCleaner=false + +log4j.logger.state.change.logger=TRACE, stateChangeAppender +log4j.additivity.state.change.logger=false + + </value> + <value-attributes> + <type>content</type> + <show-property-name>false</show-property-name> + </value-attributes> + <depends-on> + <property> + <type>ranger-kafka-plugin-properties</type> + <name>ranger-kafka-plugin-enabled</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_client_jaas_conf.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_client_jaas_conf.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_client_jaas_conf.xml new file mode 100644 index 0000000..3f63b03 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_client_jaas_conf.xml @@ -0,0 +1,41 @@ +<?xml version="1.0"?> +<?xml-stylesheet type="text/xsl" href="configuration.xsl"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration supports_final="false" supports_adding_forbidden="true"> + <property> + <name>content</name> + <display-name>kafka_client_jaas template</display-name> + <description>Kafka client jaas config</description> + <value> +KafkaClient { +com.sun.security.auth.module.Krb5LoginModule required +useTicketCache=true +renewTicket=true +serviceName="{{kafka_bare_jaas_principal}}"; +}; + </value> + <value-attributes> + <type>content</type> + <show-property-name>false</show-property-name> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_jaas_conf.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_jaas_conf.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_jaas_conf.xml new file mode 100644 index 0000000..a43cf28 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/kafka_jaas_conf.xml @@ -0,0 +1,59 @@ +<?xml version="1.0"?> +<?xml-stylesheet type="text/xsl" href="configuration.xsl"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration supports_final="false" supports_adding_forbidden="true"> + <property> + <name>content</name> + <display-name>kafka_jaas template</display-name> + <description>Kafka jaas config</description> + <value> +KafkaServer { +com.sun.security.auth.module.Krb5LoginModule required +useKeyTab=true +keyTab="{{kafka_keytab_path}}" +storeKey=true +useTicketCache=false +serviceName="{{kafka_bare_jaas_principal}}" +principal="{{kafka_jaas_principal}}"; +}; +KafkaClient { +com.sun.security.auth.module.Krb5LoginModule required +useTicketCache=true +renewTicket=true +serviceName="{{kafka_bare_jaas_principal}}"; +}; +Client { +com.sun.security.auth.module.Krb5LoginModule required +useKeyTab=true +keyTab="{{kafka_keytab_path}}" +storeKey=true +useTicketCache=false +serviceName="zookeeper" +principal="{{kafka_jaas_principal}}"; +}; + </value> + <value-attributes> + <type>content</type> + <show-property-name>false</show-property-name> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-audit.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-audit.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-audit.xml new file mode 100644 index 0000000..59e7295 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-audit.xml @@ -0,0 +1,130 @@ +<?xml version="1.0"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration> + <property> + <name>xasecure.audit.is.enabled</name> + <value>true</value> + <description>Is Audit enabled?</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.hdfs</name> + <value>true</value> + <display-name>Audit to HDFS</display-name> + <description>Is Audit to HDFS enabled?</description> + <value-attributes> + <type>boolean</type> + </value-attributes> + <depends-on> + <property> + <type>ranger-env</type> + <name>xasecure.audit.destination.hdfs</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.hdfs.dir</name> + <value>hdfs://NAMENODE_HOSTNAME:8020/ranger/audit</value> + <description>HDFS folder to write audit to, make sure the service user has requried permissions</description> + <depends-on> + <property> + <type>ranger-env</type> + <name>xasecure.audit.destination.hdfs.dir</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.hdfs.batch.filespool.dir</name> + <value>/var/log/kafka/audit/hdfs/spool</value> + <description>/var/log/kafka/audit/hdfs/spool</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.solr</name> + <value>false</value> + <display-name>Audit to SOLR</display-name> + <description>Is Solr audit enabled?</description> + <value-attributes> + <type>boolean</type> + </value-attributes> + <depends-on> + <property> + <type>ranger-env</type> + <name>xasecure.audit.destination.solr</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.solr.urls</name> + <value/> + <description>Solr URL</description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <depends-on> + <property> + <type>ranger-admin-site</type> + <name>ranger.audit.solr.urls</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.solr.zookeepers</name> + <value>NONE</value> + <description>Solr Zookeeper string</description> + <depends-on> + <property> + <type>ranger-admin-site</type> + <name>ranger.audit.solr.zookeepers</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.destination.solr.batch.filespool.dir</name> + <value>/var/log/kafka/audit/solr/spool</value> + <description>/var/log/kafka/audit/solr/spool</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.audit.provider.summary.enabled</name> + <value>true</value> + <display-name>Audit provider summary enabled</display-name> + <description>Enable Summary audit?</description> + <value-attributes> + <type>boolean</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>ranger.plugin.kafka.ambari.cluster.name</name> + <value>{{cluster_name}}</value> + <description>Capture cluster name from where Ranger kafka plugin is enabled.</description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-plugin-properties.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-plugin-properties.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-plugin-properties.xml new file mode 100644 index 0000000..29aa31c --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-plugin-properties.xml @@ -0,0 +1,148 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration supports_final="true"> + <property> + <name>policy_user</name> + <value>ambari-qa</value> + <display-name>Policy user for KAFKA</display-name> + <description>This user must be system user and also present at Ranger admin portal</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>hadoop.rpc.protection</name> + <value/> + <description>Used for repository creation on ranger admin</description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>common.name.for.certificate</name> + <value/> + <description>Common name for certificate, this value should match what is specified in repo within ranger admin</description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>zookeeper.connect</name> + <value>localhost:2181</value> + <description>Used for repository creation on ranger admin</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>ranger-kafka-plugin-enabled</name> + <value>No</value> + <display-name>Enable Ranger for KAFKA</display-name> + <description>Enable ranger kafka plugin</description> + <depends-on> + <property> + <type>ranger-env</type> + <name>ranger-kafka-plugin-enabled</name> + </property> + </depends-on> + <value-attributes> + <type>boolean</type> + <overridable>false</overridable> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>REPOSITORY_CONFIG_PASSWORD</name> + <value>kafka</value> + <property-type>PASSWORD</property-type> + <display-name>Ranger repository config password</display-name> + <description>Used for repository creation on ranger admin</description> + <value-attributes> + <type>password</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + + + + <property> + <name>external_admin_username</name> + <value></value> + <display-name>External Ranger admin username</display-name> + <description>Add ranger default admin username if want to communicate to external ranger</description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + + <property> + <name>external_admin_password</name> + <value></value> + <display-name>External Ranger admin password</display-name> + <property-type>PASSWORD</property-type> + <description>Add ranger default admin password if want to communicate to external ranger</description> + <value-attributes> + <type>password</type> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + + <property> + <name>external_ranger_admin_username</name> + <value></value> + <display-name>External Ranger Ambari admin username</display-name> + <description>Add ranger default ambari admin username if want to communicate to external ranger</description> + <value-attributes> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + + <property> + <name>external_ranger_admin_password</name> + <value></value> + <display-name>External Ranger Ambari admin password</display-name> + <property-type>PASSWORD</property-type> + <description>Add ranger default ambari admin password if want to communicate to external ranger</description> + <value-attributes> + <type>password</type> + <empty-value-valid>true</empty-value-valid> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>REPOSITORY_CONFIG_USERNAME</name> + <value>kafka</value> + <display-name>Ranger repository config user</display-name> + <description>Used for repository creation on ranger admin</description> + <depends-on> + <property> + <type>ranger-kafka-plugin-properties</type> + <name>ranger-kafka-plugin-enabled</name> + </property> + <property> + <type>kafka-env</type> + <name>kafka_user</name> + </property> + </depends-on> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-policymgr-ssl.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-policymgr-ssl.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-policymgr-ssl.xml new file mode 100644 index 0000000..4a76b60 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-policymgr-ssl.xml @@ -0,0 +1,66 @@ +<?xml version="1.0"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration> + <property> + <name>xasecure.policymgr.clientssl.keystore</name> + <value>/usr/hdp/current/kafka-broker/config/ranger-plugin-keystore.jks</value> + <description>Java Keystore files</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.policymgr.clientssl.keystore.password</name> + <value>myKeyFilePassword</value> + <property-type>PASSWORD</property-type> + <description>password for keystore</description> + <value-attributes> + <type>password</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.policymgr.clientssl.truststore</name> + <value>/usr/hdp/current/kafka-broker/config/ranger-plugin-truststore.jks</value> + <description>java truststore file</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.policymgr.clientssl.truststore.password</name> + <value>changeit</value> + <property-type>PASSWORD</property-type> + <description>java truststore password</description> + <value-attributes> + <type>password</type> + </value-attributes> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.policymgr.clientssl.keystore.credential.file</name> + <value>jceks://file/{{credential_file}}</value> + <description>java keystore credential file</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>xasecure.policymgr.clientssl.truststore.credential.file</name> + <value>jceks://file/{{credential_file}}</value> + <description>java truststore credential file</description> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-security.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-security.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-security.xml new file mode 100644 index 0000000..47ea2a8 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/configuration/ranger-kafka-security.xml @@ -0,0 +1,64 @@ +<?xml version="1.0"?> +<!-- +/** + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +--> +<configuration> + <property> + <name>ranger.plugin.kafka.service.name</name> + <value>{{repo_name}}</value> + <description>Name of the Ranger service containing policies for this Kafka instance</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>ranger.plugin.kafka.policy.source.impl</name> + <value>org.apache.ranger.admin.client.RangerAdminRESTClient</value> + <description>Class to retrieve policies from the source</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>ranger.plugin.kafka.policy.rest.url</name> + <value>{{policymgr_mgr_url}}</value> + <description>URL to Ranger Admin</description> + <on-ambari-upgrade add="false"/> + <depends-on> + <property> + <type>admin-properties</type> + <name>policymgr_external_url</name> + </property> + </depends-on> + </property> + <property> + <name>ranger.plugin.kafka.policy.rest.ssl.config.file</name> + <value>/etc/kafka/conf/ranger-policymgr-ssl.xml</value> + <description>Path to the file containing SSL details to contact Ranger Admin</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>ranger.plugin.kafka.policy.pollIntervalMs</name> + <value>30000</value> + <description>How often to poll for changes in policies?</description> + <on-ambari-upgrade add="false"/> + </property> + <property> + <name>ranger.plugin.kafka.policy.cache.dir</name> + <value>/etc/ranger/{{repo_name}}/policycache</value> + <description>Directory where Ranger policies are cached after successful retrieval from the source</description> + <on-ambari-upgrade add="false"/> + </property> +</configuration> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/kerberos.json ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/kerberos.json b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/kerberos.json new file mode 100644 index 0000000..eb31ad6 --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/kerberos.json @@ -0,0 +1,76 @@ +{ + "services": [ + { + "name": "KAFKA", + "identities": [ + { + "name": "/smokeuser" + } + ], + "configurations": [ + { + "kafka-broker": { + "authorizer.class.name": "kafka.security.auth.SimpleAclAuthorizer", + "principal.to.local.class":"kafka.security.auth.KerberosPrincipalToLocal", + "super.users": "user:${kafka-env/kafka_user}", + "security.inter.broker.protocol": "PLAINTEXTSASL", + "zookeeper.set.acl": "true", + "listeners": "${kafka-broker/listeners|replace(\\bPLAINTEXT\\b, PLAINTEXTSASL)}" + } + }, + { + "ranger-kafka-audit": { + "xasecure.audit.jaas.Client.loginModuleName": "com.sun.security.auth.module.Krb5LoginModule", + "xasecure.audit.jaas.Client.loginModuleControlFlag": "required", + "xasecure.audit.jaas.Client.option.useKeyTab": "true", + "xasecure.audit.jaas.Client.option.storeKey": "false", + "xasecure.audit.jaas.Client.option.serviceName": "solr", + "xasecure.audit.destination.solr.force.use.inmemory.jaas.config": "true" + } + } + ], + "components": [ + { + "name": "KAFKA_BROKER", + "identities": [ + { + "name": "kafka_broker", + "principal": { + "value": "${kafka-env/kafka_user}/_HOST@${realm}", + "type": "service", + "configuration": "kafka-env/kafka_principal_name" + }, + "keytab": { + "file": "${keytab_dir}/kafka.service.keytab", + "owner": { + "name": "${kafka-env/kafka_user}", + "access": "r" + }, + "group": { + "name": "${cluster-env/user_group}", + "access": "" + }, + "configuration": "kafka-env/kafka_keytab" + } + }, + { + "name": "/KAFKA/KAFKA_BROKER/kafka_broker", + "principal": { + "configuration": "ranger-kafka-audit/xasecure.audit.jaas.Client.option.principal" + }, + "keytab": { + "configuration": "ranger-kafka-audit/xasecure.audit.jaas.Client.option.keyTab" + } + }, + { + "name": "/HDFS/NAMENODE/hdfs", + "when" : { + "contains" : ["services", "HDFS"] + } + } + ] + } + ] + } + ] +} http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metainfo.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metainfo.xml b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metainfo.xml new file mode 100644 index 0000000..a19850e --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metainfo.xml @@ -0,0 +1,109 @@ +<?xml version="1.0"?> +<!-- + Licensed to the Apache Software Foundation (ASF) under one or more + contributor license agreements. See the NOTICE file distributed with + this work for additional information regarding copyright ownership. + The ASF licenses this file to You under the Apache License, Version 2.0 + (the "License"); you may not use this file except in compliance with + the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. +--> +<metainfo> + <schemaVersion>2.0</schemaVersion> + <services> + <service> + <name>KAFKA</name> + <displayName>Kafka</displayName> + <comment>A high-throughput distributed messaging system</comment> + <version>0.10.0.3.0</version> + <components> + <component> + <name>KAFKA_BROKER</name> + <displayName>Kafka Broker</displayName> + <category>MASTER</category> + <cardinality>1+</cardinality> + <versionAdvertised>true</versionAdvertised> + <dependencies> + <dependency> + <name>ZOOKEEPER/ZOOKEEPER_SERVER</name> + <scope>cluster</scope> + <auto-deploy> + <enabled>true</enabled> + </auto-deploy> + </dependency> + </dependencies> + <commandScript> + <script>scripts/kafka_broker.py</script> + <scriptType>PYTHON</scriptType> + <timeout>1200</timeout> + </commandScript> + <logs> + <log> + <logId>kafka_server</logId> + <primary>true</primary> + </log> + <log> + <logId>kafka_controller</logId> + </log> + <log> + <logId>kafka_request</logId> + </log> + <log> + <logId>kafka_logcleaner</logId> + </log> + <log> + <logId>kafka_statechange</logId> + </log> + </logs> + </component> + </components> + <commandScript> + <script>scripts/service_check.py</script> + <scriptType>PYTHON</scriptType> + <timeout>300</timeout> + </commandScript> + <requiredServices> + <service>ZOOKEEPER</service> + </requiredServices> + <configuration-dependencies> + <config-type>kafka-broker</config-type> + <config-type>kafka-env</config-type> + <config-type>kafka-log4j</config-type> + <config-type>ranger-kafka-plugin-properties</config-type> + <config-type>ranger-kafka-audit</config-type> + <config-type>ranger-kafka-policymgr-ssl</config-type> + <config-type>ranger-kafka-security</config-type> + <config-type>zookeeper-env</config-type> + <config-type>zoo.cfg</config-type> + <config-type>kafka_jaas_conf</config-type> + <config-type>kafka_client_jaas_conf</config-type> + </configuration-dependencies> + <osSpecifics> + <osSpecific> + <osFamily>redhat7,amazon2015,redhat6,suse11,suse12</osFamily> + <packages> + <package> + <name>kafka_${stack_version}</name> + </package> + </packages> + </osSpecific> + <osSpecific> + <osFamily>debian7,ubuntu12,ubuntu14,ubuntu16</osFamily> + <packages> + <package> + <name>kafka-${stack_version}</name> + </package> + </packages> + </osSpecific> + </osSpecifics> + <restartRequiredAfterChange>true</restartRequiredAfterChange> + </service> + </services> +</metainfo> http://git-wip-us.apache.org/repos/asf/ambari/blob/3817ad5d/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metrics.json ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metrics.json b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metrics.json new file mode 100644 index 0000000..e99f4eb --- /dev/null +++ b/ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/metrics.json @@ -0,0 +1,239 @@ +{ + "KAFKA_BROKER": { + "Component": [ + { + "type": "ganglia", + "metrics": { + "default": { + "metrics/jvm/uptime": { + "metric": "jvm.uptime", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/heap_usage": { + "metric": "jvm.heap_usage", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/non_heap_usage": { + "metric": "jvm.non_heap_usage", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/thread-states/runnable": { + "metric": "jvm.thread-states.runnable", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/thread-states/blocked": { + "metric": "jvm.thread-states.blocked", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/thread-states/timed_waiting": { + "metric": "jvm.thread-states.timed_waiting", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/thread-states/terminated": { + "metric": "jvm.thread-states.terminated", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/thread_count": { + "metric": "jvm.thread_count", + "pointInTime": true, + "temporal": true + }, + "metrics/jvm/daemon_thread_count": { + "metric": "jvm.daemon_thread_count", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsMessagesInPerSec/1MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.MessagesInPerSec.1MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsMessagesInPerSec/5MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.MessagesInPerSec.5MinuteRate", + "pointInTime": false, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsMessagesInPerSec/15MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.MessagesInPerSec.15MinuteRate", + "pointInTime": false, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsMessagesInPerSec/meanRate": { + "metric": "kafka.server.BrokerTopicMetrics.MessagesInPerSec.meanRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsMessagesInPerSec/count": { + "metric": "kafka.server.BrokerTopicMetrics.MessagesInPerSec.count", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesInPerSec/1MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesInPerSec.1MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesInPerSec/5MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesInPerSec.5MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesInPerSec/15MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesInPerSec.15MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesInPerSec/meanRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesInPerSec.meanRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesInPerSec/count": { + "metric": "kafka.server.BrokerTopicMetrics.BytesInPerSec.count", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesOutPerSec/1MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesOutPerSec.1MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesOutPerSec/5MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesOutPerSec.5MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesOutPerSec/15MinuteRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesOutPerSec.15MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesOutPerSec/meanRate": { + "metric": "kafka.server.BrokerTopicMetrics.BytesOutPerSec.meanRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/BrokerTopicMetrics/AllTopicsBytesOutPerSec/count": { + "metric": "kafka.server.BrokerTopicMetrics.BytesOutPerSec.count", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/KafkaController/ActiveControllerCount": { + "metric": "kafka.controller.KafkaController.ActiveControllerCount", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/LeaderElectionRateAndTimeMs/meanRate": { + "metric": "kafka.controller.ControllerStats.LeaderElectionRateAndTimeMs.meanRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/LeaderElectionRateAndTimeMs/1MinuteRate": { + "metric": "kafka.controller.ControllerStats.LeaderElectionRateAndTimeMs.1MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/LeaderElectionRateAndTimeMs/5MinuteRate": { + "metric": "kafka.controller.ControllerStats.LeaderElectionRateAndTimeMs.5MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/LeaderElectionRateAndTimeMs/15MinuteRate": { + "metric": "kafka.controller.ControllerStats.LeaderElectionRateAndTimeMs.15MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/LeaderElectionRateAndTimeMs/count": { + "metric": "kafka.controller.ControllerStats.LeaderElectionRateAndTimeMs.count", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/UncleanLeaderElectionsPerSec/1MinuteRate": { + "metric": "kafka.controller.ControllerStats.UncleanLeaderElectionsPerSec.1MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/UncleanLeaderElectionsPerSec/5MinuteRate": { + "metric": "kafka.controller.ControllerStats.UncleanLeaderElectionsPerSec.5MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/UncleanLeaderElectionsPerSec/15MinuteRate": { + "metric": "kafka.controller.ControllerStats.UncleanLeaderElectionsPerSec.15MinuteRate", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/controller/ControllerStats/OfflinePartitionsCount": { + "metric": "kafka.controller.ControllerStats.OfflinePartitionsCount", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/ReplicaManager/PartitionCount": { + "metric": "kafka.server.ReplicaManager.PartitionCount", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/ReplicaManager/LeaderCount": { + "metric": "kafka.server.ReplicaManager.LeaderCount", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/ReplicaManager/UnderReplicatedPartitions": { + "metric": "kafka.server.ReplicaManager.UnderReplicatedPartitions", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/ReplicaManager/ISRShrinksPerSec": { + "metric": "kafka.server.ReplicaManager.ISRShrinksPerSec", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/ReplicaManager/ISRExpandsPerSec": { + "metric": "kafka.server.ReplicaManager.ISRExpandsPerSec", + "pointInTime": true, + "temporal": true + }, + + "metrics/kafka/server/ReplicaFetcherManager/Replica-MaxLag": { + "metric": "kafka.server.ReplicaFetcherManager.MaxLag.clientId.Replica", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/ProducerRequestPurgatory/PurgatorySize": { + "metric": "kafka.server.ProducerRequestPurgatory.PurgatorySize", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/server/FetchRequestPurgatory/PurgatorySize": { + "metric": "kafka.server.FetchRequestPurgatory.PurgatorySize", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/cluster/Partition/$1-UnderReplicated": { + "metric": "kafka.cluster.Partition.(\\w+)-UnderReplicated", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/consumer/ConsumerFetcherManager/$1-MaxLag": { + "metric": "kafka.consumer.ConsumerFetcherManager.(\\w+)-MaxLag", + "pointInTime": true, + "temporal": true + }, + "metrics/kafka/consumer/ConsumerFetcherManager/$1-MinFetch": { + "metric": "kafka.consumer.ConsumerFetcherManager.(\\w+)-MinFetch", + "pointInTime": true, + "temporal": true + } + } + } + } + ] + } +}
