Using Ambari, add a new node (host) to your cluster. This new node will be Unravel Server's host machine.

Verify that Ambari installed the following clients on the new host:

If the cluster is kerberized, check Kerberos settings with the kinit and klist commands:

klist -kt /etc/security/keytabs/unravel.keytab
Keytab name: FILE:/etc/security/keytabs/unravel.keytab
KVNO Timestamp           Principal
---- ------------------- ------------------------------------------------------
   3 03/08/2019 15:20:13 unravel/abcd25.unraveldata.com@lab.localdomain

kinit -kt /etc/security/keytabs/unravel.keytab unravel/abcd25.unraveldata.com@lab.localdomain

klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: unravel/abcd25.unraveldata.com@lab.localdomain 
Valid starting       Expires              Service principal
03/14/2019 16:02:49  03/15/2019 16:02:49  krbtgt/lab.localdomain@lab.localdomain 
# groups unravelunravel : unravel hadoop 
# kvno unravel/abcd25.unraveldata.com@lab.localdomainunravel/abcd25.unraveldata.com@lab.localdomain: kvno = 3

Check the unravel user's network access.

If the cluster is kerberized, make sure Unravel can access http://timeline-host:8188/ws/v1/timeline.  The curl command below requires a successful kinit command for the unravel user.  The -u option is a fake user and is ignored when relying on GSS-API.

curl --negotiate -v -u :-X GET http://timeline-host:8188/ws/v1/timeline
...
> Authorization: Negotiate token
> User-Agent: curl/7.29.0
> Host: congo52.unraveldata.com:8188
> Accept: */*
>
< HTTP/1.1 200 OK
...

Edit the Unravel properties through automatic or manual configuration. Following is a reference list of the basic properties that you can configure for HDP installation.

If Kerberos is enabled, do the following:

1. Create or identify a principal and keytab for Unravel to use to access the HDFS resources listed in the table below and the REST API.

   Resource	Principal	Access	Description
   hdfs:///user/spark/applicationHistory/,hdfs:///spark2-history/,hdfs:///spark-history/	Your restricted principal for Unravel	read+execute	Spark and Spark2 event logs
   hdfs://mr-history/done	Your restricted principal for Unravel	read+execute	MapReduce logs
   hdfs:///app-logs/*/logs*	Your restricted principal for Unravel	read+execute	YARN log aggregation directory
   hdfs://apps/hive/warehouse (Default value of hive.metastore.warehouse.dir)	Your restricted principal for Unravel	read+execute	File and partition sizes in the Hive warehouse
   Hive metastore database GRANT	hive	read+execute	Hive table information

2. Use the manager tool to access the configuration UI and run the following commands to set these properties:

   manager config kerberos set --keytab /path/to/keytab --principal <service@REALM>
   
   manager config kerberos enable

   Also, refer to Kerberos configurations.

   Property/Description	Set by user	Unit	Default
   com.unraveldata.kerberos.principal Name of the Kerberos principal for Unravel daemons to use, along with its host name, domain name, and realm. Example: unravel/myhost.mydomain@MYREALM		string	-
   com.unraveldata.kerberos.keytab.path Path to keytab file, on Unravel Server, corresponding to the Kerberos principal for Unravel daemons to use. Example: /usr/local/unravel/etc/unravel.keytab You can verify the principal in a keytab by using klist -kt KETYAB_FILE. The keytab file should have chmod bits 500 and be owned by unravel local user (default) or by the user you want to use, as explained in Run Unravel Daemons with Custom User.		string

If Ranger is enabled, do the following:

1. Check/set Ranger permissions for the runtime user.

2. Create or identify a principal and keytab for Unravel daemons to access the HDFS resources listed in the table below.

   Resource	Principal	Access	Description
   hdfs:///user/spark/applicationHistory/,hdfs:///spark2-history/,hdfs:///spark-history/	Your restricted principal for Unravel	read+execute	Spark and Spark2 event logs
   hdfs://mr-history/done	Your restricted principal for Unravel	read+execute	MapReduce logs
   hdfs:///app-logs/*/logs*	Your restricted principal for Unravel	read+execute	YARN log aggregation directory
   hdfs://apps/hive/warehouse (Default value of hive.metastore.warehouse.dir)	Your restricted principal for Unravel	read+execute	File and partition sizes in the Hive warehouse
   Hive metastore database GRANT	hive	read+execute	Hive table information

If you are using a virus scanner,

It is recommended to disable your virus scanner from scanning the elasticsearch directories which are located under Unravel installation directory/data.

In the Ambari dashboard, set YARN ACLs.

1. Select YARN | Configs | Advanced.

2. Set yarn.acl.enable to true.

3. Add the Unravel user specified in com.unraveldata.kerberos.principal to yarn.admin.acl.

4. Save your changes.