forked from docs/doc-exports
Yang, Tong
3f5759eed2
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
50 lines
9.2 KiB
HTML
50 lines
9.2 KiB
HTML
<a name="mrs_01_0853"></a><a name="mrs_01_0853"></a>
|
|
|
|
<h1 class="topictitle1">Creating Yarn Roles</h1>
|
|
<div id="body8662426"><div class="section" id="mrs_01_0853__en-us_topic_0000001173789492_sefb5491eb22b46b7ae6dcda52045fda3"><h4 class="sectiontitle">Scenario</h4><p id="mrs_01_0853__en-us_topic_0000001173789492_a8e029b35af464590ae99fad252f1aee9">This section describes how to create and configure a Yarn role. The Yarn role can be assigned with Yarn administrator permission and manage Yarn queue resources.</p>
|
|
<div class="note" id="mrs_01_0853__en-us_topic_0000001173789492_note497615453293"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_0853__en-us_topic_0000001173789492_p473939559">If the current component uses Ranger for permission control, you need to configure permission management policies based on Ranger. Refer to <a href="mrs_01_1859.html">Adding a Ranger Access Permission Policy for Yarn</a>.</p>
|
|
</div></div>
|
|
</div>
|
|
<div class="section" id="mrs_01_0853__en-us_topic_0000001173789492_s9109011a40114834ab799887a7f9458b"><h4 class="sectiontitle">Prerequisites</h4><ul id="mrs_01_0853__en-us_topic_0000001173789492_ucce2c3562cf542d8bd7c6d4b86b5867b"><li id="mrs_01_0853__en-us_topic_0000001173789492_l1482596053a9478ca1437dc98de5bfae">The system administrator has understood the service requirements.</li><li id="mrs_01_0853__en-us_topic_0000001173789492_ldb37f3e226d94f048948d9d0ec99a32a">You have logged in to Manager.</li></ul>
|
|
</div>
|
|
<div class="section" id="mrs_01_0853__en-us_topic_0000001173789492_s6edf1022fe2241b2b83cddecf9d0e1e9"><h4 class="sectiontitle">Procedure</h4><ol id="mrs_01_0853__en-us_topic_0000001173789492_ol14354162191110"><li id="mrs_01_0853__en-us_topic_0000001173789492_li335411211115"><span>Choose System > Permission > Role.</span></li><li id="mrs_01_0853__en-us_topic_0000001173789492_li735417212111"><span>Click <strong id="mrs_01_0853__en-us_topic_0000001173789492_b15821117642643">Create Role</strong> and set a role name and enter description.</span></li><li id="mrs_01_0853__en-us_topic_0000001173789492_li9354152191119"><span>Refer <a href="#mrs_01_0853__en-us_topic_0000001173789492_table16354521181114">Table 1</a> to configure resource permissions for roles.</span><p><p id="mrs_01_0853__en-us_topic_0000001173789492_p1435432141118">Yarn permissions:</p>
|
|
<ul id="mrs_01_0853__en-us_topic_0000001173789492_ul6354321201115"><li id="mrs_01_0853__en-us_topic_0000001173789492_li1035462161114">Cluster management: Yarn administrator permissions.</li><li id="mrs_01_0853__en-us_topic_0000001173789492_li173541321101113">Queue scheduling: queue resource management.
|
|
<div class="tablenoborder"><a name="mrs_01_0853__en-us_topic_0000001173789492_table16354521181114"></a><a name="en-us_topic_0000001173789492_table16354521181114"></a><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_0853__en-us_topic_0000001173789492_table16354521181114" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Setting a role</caption><thead align="left"><tr id="mrs_01_0853__en-us_topic_0000001173789492_row23541921121117"><th align="left" class="cellrowborder" valign="top" width="26.26%" id="mcps1.3.3.2.3.2.2.2.1.2.3.1.1"><p id="mrs_01_0853__en-us_topic_0000001173789492_p63541921131118">Task</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="73.74000000000001%" id="mcps1.3.3.2.3.2.2.2.1.2.3.1.2"><p id="mrs_01_0853__en-us_topic_0000001173789492_p103541821171118">Operation</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="mrs_01_0853__en-us_topic_0000001173789492_row7355112171119"><td class="cellrowborder" valign="top" width="26.26%" headers="mcps1.3.3.2.3.2.2.2.1.2.3.1.1 "><p id="mrs_01_0853__en-us_topic_0000001173789492_p035562161115">Setting the Yarn administrator permission</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="73.74000000000001%" headers="mcps1.3.3.2.3.2.2.2.1.2.3.1.2 "><p id="mrs_01_0853__en-us_topic_0000001173789492_p19355621191118">In the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b114798420042643">Configure Resource Permission</strong> table, choose <em id="mrs_01_0853__en-us_topic_0000001173789492_i48244243942643">Name of the desired cluster</em> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b43185574042643">Yarn</strong> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b162598795742643">Cluster Management</strong>.</p>
|
|
<div class="note" id="mrs_01_0853__en-us_topic_0000001173789492_note23551212116"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="mrs_01_0853__en-us_topic_0000001173789492_p173551521111110">The Yarn service needs to be restarted to set the Yarn administrator permission so that the saved role configuration can take effect.</p>
|
|
</div></div>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_0853__en-us_topic_0000001173789492_row20355192131110"><td class="cellrowborder" valign="top" width="26.26%" headers="mcps1.3.3.2.3.2.2.2.1.2.3.1.1 "><p id="mrs_01_0853__en-us_topic_0000001173789492_p12355172191115">Setting the permission for a user to submit tasks in a specified Yarn queue</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="73.74000000000001%" headers="mcps1.3.3.2.3.2.2.2.1.2.3.1.2 "><ol type="a" id="mrs_01_0853__en-us_topic_0000001173789492_ol235562101118"><li id="mrs_01_0853__en-us_topic_0000001173789492_li173557213118">In the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b74669424842643">Configure Resource Permission</strong> table, choose <em id="mrs_01_0853__en-us_topic_0000001173789492_i103931464542643">Name of the desired cluster</em> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b134418330242643">Yarn</strong> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b64483984442643">Scheduling Queue</strong> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b12558179942643">root</strong>.</li><li id="mrs_01_0853__en-us_topic_0000001173789492_li1935582151114">In the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b145147948942643">Permission</strong> column of the specified queue, select <strong id="mrs_01_0853__en-us_topic_0000001173789492_b58870693442643">Submit</strong>.</li></ol>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_0853__en-us_topic_0000001173789492_row1235592111111"><td class="cellrowborder" valign="top" width="26.26%" headers="mcps1.3.3.2.3.2.2.2.1.2.3.1.1 "><p id="mrs_01_0853__en-us_topic_0000001173789492_p6355192119111">Setting the permission for a user to manage tasks in a specified Yarn queue</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="73.74000000000001%" headers="mcps1.3.3.2.3.2.2.2.1.2.3.1.2 "><ol type="a" id="mrs_01_0853__en-us_topic_0000001173789492_ol173551221111118"><li id="mrs_01_0853__en-us_topic_0000001173789492_li63556218111">In the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b207217126442643">Configure Resource Permission</strong> table, choose <em id="mrs_01_0853__en-us_topic_0000001173789492_i100580288242643">Name of the desired cluster</em> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b69560254942643">Yarn</strong> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b18535024242643">Scheduling Queue</strong> > <strong id="mrs_01_0853__en-us_topic_0000001173789492_b172778312042643">root</strong>.</li><li id="mrs_01_0853__en-us_topic_0000001173789492_li10355321111110">In the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b16262425642643">Permission</strong> column of the specified queue, select <strong id="mrs_01_0853__en-us_topic_0000001173789492_b7840339442643">Manage</strong>.</li></ol>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</li></ul>
|
|
<p id="mrs_01_0853__en-us_topic_0000001173789492_p135542118119">If the Yarn role contains the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b94522093642643">Submit</strong> or <strong id="mrs_01_0853__en-us_topic_0000001173789492_b21838672342643">Manage</strong> permission of a parent queue, the sub-queue inherits the permission by default, that is, the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b65341761142643">Submit</strong> or <strong id="mrs_01_0853__en-us_topic_0000001173789492_b209861024642643">Manage</strong> permission is automatically added for the sub-queue. Permissions inherited by sub-queues will not be displayed as selected in the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b11444324181914">Configure Resource Permission</strong> table.</p>
|
|
<p id="mrs_01_0853__en-us_topic_0000001173789492_p193558212114">If you select only the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b157676835542643">Submit</strong> permission of a parent queue when setting the Yarn role, you need to manually specify the queue name when submitting tasks as a user with the permission of this role. Otherwise, when the parent queue has multiple sub-queues, the system does not automatically determine the queue to which the task is submitted and therefore submits the task to the <strong id="mrs_01_0853__en-us_topic_0000001173789492_b133552998642643">default</strong> queue.</p>
|
|
</p></li><li id="mrs_01_0853__en-us_topic_0000001173789492_li10355162111115"><span>Click <strong id="mrs_01_0853__en-us_topic_0000001173789492_b195202197542643">OK</strong>.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_0851.html">Using Yarn</a></div>
|
|
</div>
|
|
</div>
|
|
|