检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS FusionInsight Manager.
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS FusionInsight Manager.
synchronization APIs Obtaining Synchronized IAM Users and User Groups GET /v2/{project_id}/clusters/{cluster_id}/iam-sync-user Synchronizing an IAM User and User Group POST /v2/{project_id}/clusters/{cluster_id}/iam-sync-user Cancelling Synchronization of Specified Users and User
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS FusionInsight Manager.
On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users. Perform this step only when Kerberos authentication is enabled for the cluster. After IAM user synchronization, wait for five minutes before submitting a job.
If you have enabled operation protection (for details, see Critical Operation Protection of IAM), enter the verification code obtained using the verification method you selected (as shown in Figure 2) to prevent risks and losses caused by misoperations.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) Click Download Client. In Client Type, select All client files.
If IAM users have been synchronized, you can view abnormal roles on the Components page. If they are not synchronized, you can view abnormal roles on the Manager page of this cluster. Cause Analysis The failure is caused by the cluster component exception.
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS FusionInsight Manager.
If the MRS cluster and VPC are not in the same enterprise project, you need to add the VPC view permission in the IAM view to view VPC and cluster information. Parent topic: Functions
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.)
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS FusionInsight Manager.
Prerequisites The IAM users have been synchronized in advance. You can do this by clicking Synchronize next to IAM User Sync on the Dashboard page of the cluster details. You have logged in to MRS Manager. For how to log in, see Accessing MRS FusionInsight Manager.
The path is ${BIGDATA_DATA_HOME}/dbdata_om/dumpData/iam/operatelog on the active management node. The file name format is OperateLog_store_YY_MM_DD_HH_MM_SS.csv. A maximum of 50 historical audit log files can be saved.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) View the IP addresses of the ZooKeeper role instance.
Fine-grained authentication for OBS storage-compute decoupled clusters If you want to perform fine-grained permission control on OBS resources in OBS storage-compute decoupled clusters, MRS provides you with a fine-grained permission control solution based on the IAM agency.
Guardian generates a temporary credential with fine-grained authentication content based on the IAM access request of the current login user and returns the credential to the component. The component uses the credential to access OBS.
MRS uses IAM for permission management and supports fine-grained authorization. You can manage permissions based on service scenarios and apply least-privilege permissions. For details, see Creating an IAM User and Granting MRS Permissions.
Data operations: IAM user tasks, adding user, and adding user group. Viewing MRS Operation Logs Log in to the MRS console. In the navigation pane on the left, choose Operation Logs.
If the Components tab is unavailable, complete IAM user synchronization first. (On the Dashboard page, click Synchronize on the right side of IAM User Sync to synchronize IAM users.) For MRS 3.x or later, log in to FusionInsight Manager.
