检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) For MRS 3.x or later: Log in to FusionInsight Manager and choose Cluster.
On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users. Perform this step only when Kerberos authentication is enabled for the cluster. After IAM user synchronization, wait for five minutes before submitting a job.
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS Manager.
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS Manager.
If you have enabled operation protection (for details, see Critical Operation Protection of IAM), enter the verification code obtained using the verification method you selected (as shown in Figure 2) to prevent risks and losses caused by misoperations.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) Click Download Client. In Client Type, select All client files.
If IAM users have been synchronized, you can view abnormal roles on the Components page. If they are not synchronized, you can view abnormal roles on the Manager page of this cluster. Cause Analysis The failure is caused by the cluster component exception.
If the MRS cluster and VPC are not in the same enterprise project, you need to add the VPC view permission in the IAM view to view VPC and cluster information. Parent topic: Functions
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.)
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS Manager.
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS Manager.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) View the IP addresses of the ZooKeeper role instance.
Fine-grained authentication for OBS storage-compute decoupled clusters If you want to perform fine-grained permission control on OBS resources in OBS storage-compute decoupled clusters, MRS provides you with a fine-grained permission control solution based on the IAM agency.
Guardian generates a temporary credential with fine-grained authentication content based on the IAM access request of the current login user and returns the credential to the component. The component uses the credential to access OBS.
MRS uses IAM for permission management and supports fine-grained authorization. You can manage permissions based on service scenarios and apply least-privilege permissions. For details, see Creating an IAM User and Granting MRS Permissions.
Data operations: IAM user tasks, adding user, and adding user group. Viewing MRS Operation Logs Log in to the MRS console. In the navigation pane on the left, choose Operation Logs.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) For MRS 3.x or later, log in to FusionInsight Manager.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.)
On the Dashboard page, click Synchronize on the right of IAM User Sync to synchronize the IAM user. Click Manage Agency on the right of Agency, select the created agency, for example, mrs_ecs_obs, and click OK to bind the agency to the cluster.
Common Operation MRS Console FusionInsight Manager Changing subnets, adding security group rules, controlling OBS permissions, managing agencies, and synchronizing IAM users Supported Not supported Adding node groups, scaling out, scaling in, and upgrading specifications Supported
