CDP Professional Edition cluster scale-out process

Prerequisites

A scale-out in Alibaba Cloud CDP provisioned the machines.

Procedure

Step 1. Install the FreeIPA client on the new nodes

1. Install Ansible on the utility node.

   # Execute as the root user
   yum -y install ansible

2. To create an Ansible script for installing the FreeIPA client, create a file named hosts.increase_nodes in the /var/cdp-pvc-install folder and add the following content:

   [krb5_server]
   cdp-utility-1-2.[your cluster id].[your cluster region id].cdp.aliyuncs.com
   
   [increase_nodes]
   [FDQN of the new node, one node per line]

3. In the /var/cdp-pvc-install folder, create a file named install_freeipa_client.yml and add the following content:

   - name: Setup FreeIPA clients
     hosts: increase_nodes
     become: yes
     roles:
       - role: freeipa.ansible_freeipa.ipaclient
         state: present
         ipaserver_realm: "{{ krb5_realm }}"
         ipaserver_domain: "{{ krb5_domain | default(krb5_realm | lower) }}"
         ipaclient_servers: "{{ groups['krb5_server'] }}"
         when: "krb5_kdc_type == 'Red Hat IPA' and 'krb5_server' in groups"
     tasks:
       - name: Set sssd to enumerate users and groups
         lineinfile:
           path: /etc/sssd/sssd.conf
           insertafter: "^\\[domain/.+\\]"
           regexp: "^enumerate"
           line: "enumerate = True"
         when: "krb5_kdc_type == 'Red Hat IPA' and 'krb5_server' in groups"
         notify:
           - restart sssd
     handlers:
       - name: restart sssd
         service:
           name: sssd
           state: restarted
     tags:
       - security
       - kerberos
       - tls

4. On the cdp-utility-1-1 node, run the following command in the /var/cdp-pvc-install folder:

   ansible-playbook -i hosts.increase_nodes --extra-vars @environment/extra_vars.yml install_freeipa_client.yml

Step 2. Add hosts in Cloudera Manager

Click Hosts > Add Hosts and follow the instructions in the wizard to add the hosts to the cluster.

If you are scaling out Data Service nodes, you must assign the Docker Server and ECS Agent roles to the new nodes after adding them to the cluster. Then, restart the ECS Server and run the Unseal Vault action from the ECS console.