No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FusionInsight HD 6.5.0 Product Description 02

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Manager

Manager

Basic Concept

Function

As a FusionInsight HD O&M management system, FusionInsight Manager provides centralized cluster management capabilities for services deployed in a cluster.

FusionInsight Manager supports large-scale cluster installation and deployment, performance monitoring, alarm management, user management, rights management, auditing, service management, health check, log collection, and upgrade and patching.

Architecture

Figure 2-59 shows the logical architecture of FusionInsight Manager.

Figure 2-59 Logical architecture of FusionInsight Manager

FusionInsight Manager consists of OMS and OMA.

  • OMS: management node in the O&M system. There are two OMS nodes deployed in active/standby mode.
  • OMA: managed node in the O&M system. There are multiple OMA nodes.

Table 2-16 describes the modules in Figure 2-59.

Table 2-16 Module description

Module

Description

Web Service

Web service deployed on Tomcat. The Web Service provides HTTPS interfaces to access FusionInsight Manager from a browser. The Web Service also provides northbound Syslog and SNMP access capabilities.

OMS

Management node in the O&M system. There are two OMS nodes deployed in active/standby mode.

OMA

Managed node in the O&M system. There are multiple OMA nodes.

Controller

Control center of FusionInsight Manager. The Controller aggregates information of all nodes in a cluster and centrally displays the information to administrators. The Controller also receives operation instructions from administrators and synchronizes information to related nodes in the cluster based on the instructions.

The Controller implements various management actions:

  1. The Web Server delivers various management actions (such as installation, service startup or stop, and configuration modification) to the Controller.
  2. The Controller decomposes the commands and delivers the actions to each Node Agent after the command decomposition. For example, starting a service involves multiple roles and instances.
  3. The Controller is responsible for monitoring the implementation of each action.

Node Agent

The Node Agent is deployed on each cluster node and enables FusionInsight Manager on each node.

  • The Node Agent interacts with the Controller for all components deployed on the node to implement multipoint-to-point aggregation.
  • The Node Agent acts as the Controller to perform operations on components deployed on a node.

The Node Agent sends heartbeats to the Controller every 3 seconds. The interval for sending heartbeats cannot be configured.

IAM

Records audit logs. Each non-query operation on the FusionInsight Manager UI has a related audit log.

PMS

Performance monitoring module. The PMS collects the performance monitoring data for each OMA and provides the query function.

CEP

Convergence function module. For example, the CEP integrates the used disk space of all OMAs into a performance indicator.

FMS

Alarm module. The FMS collects alarms for each OMA and provides the query function.

OMM Agent

Agent that collects the performance monitoring data and alarms for OMA.

CAS

Unified authentication center. Login authentication in the CAS is required during the login to the Web Service. The browser automatically switches to the CAS using the URL.

AOS

A rights management module for managing the rights of users and user groups.

ACS

A user and user group management module for managing users and user groups.

Kerberos

Deployed in the OMS and cluster.

  • OMS Kerberos supports single sign-on (SSO) and authentication between Controller and Node Agent.
  • Cluster Kerberos provides the component user security authentication function. The service name is KrbServer, including two role instances:
    • KerberosServer: the authentication server, which is used to provide security authentication for FusionInsight HD.
    • KerberosAdmin: the process used to manage Kerberos users.

Ldap

Deployed in the OMS and cluster.

  • OMS LDAP provides data storage for user authentication.
  • Cluster LDAP backs up the OMS LDAP. The service name is LdapServer, and the role instance is SlapdServer.

Database

FusionInsight Manager database, which is used to store information such as logs and alarms.

HA

High availability management module. Two OMS nodes are deployed in active/standby mode and managed using HA.

NTP Server

NTP Client

Synchronize system clocks of nodes in a cluster.

Key Features

One-Click Installation

The web user interface (UI) of FusionInsight Manager provides wizard-based steps for users to install a cluster.

Figure 2-60 Installing a cluster by one click
Unified Alarm Monitoring

Manager provides visual and convenient alarm monitoring function. The Homepage allows users to quickly obtain key cluster performance indicators, evaluate cluster health status, customize performance indicator display, and convert indicators to alarms. Manager can monitor the running status of all components and report alarms in real time. The WebUI of Manager provides details about performance indicators and alarm clearing methods to help users quickly rectify faults.

Unified User Rights Management

Manager allows administrators to centrally manage component permissions.

After introducing the role concept, Manager centrally displays and manages component permissions in role-based access control (RBAC) mode, and organizes these permissions based on permission sets (roles) to form a unified system permission concept. By doing so, common users cannot obtain internal permission management details and permissions become easy for administrators to manage, greatly facilitating permission management and improving user experience.

SSO

The single sign-on (SSO) function is configured between Manager web UI and component web UIs, and between and third-party systems.

This function centrally manages and authenticates users and component users. Manager manages users over Lightweight Directory Access Protocol (LDAP), uses Kerberos for authentication, and utilizes central authentication service (CAS) to implement SSO (including single sign-on and single sign-off). A set of Kerberos and LDAP management mechanism is used between the OMS and components. With SSO, users can easily switch tasks between Manager web UI, component web UIs, and third-party systems, without switching to another user.

NOTE:
  • To ensure security, the CAS Server can retain a ticket-granting ticket (TGT) used by a user only for 20 minutes.
  • If the user does not perform operations on the pages (including the Manager portal and component WebUIs) within 20 minutes, the pages are locked automatically.
Automatic Health Check and Inspection

Manager provides users with automatic inspection on system running environments and helps users check and audit system running health by one click, ensuring correct system running and lowering system operation and maintenance costs. After reviewing inspection results, users can export reports for archiving and fault analysis.

Tenant Management

Manager introduces the multi-tenant concept. CPU, memory, and disk resources in cluster can be integrated into a set, which is called a tenant. If there are multiple tenants, a multi-tenant system is called.

The multi-tenant function supports layered tenant mode, and allows an administrator to dynamically add or delete a tenant to implement resource isolation and manage computing and storage resources of tenants.

  • The computing resources are the Yarn task queue resources of a tenant. Users are allowed to modify the task queue quota and view usage status and statistics of task queues.
  • The storage resources refer to HDFS storage. Users are allowed to add or delete tenant HDFS storage directories and set the directory file quantity quota and storage space quota.

As the unified tenant management platform of FusionInsight HD, Manager provides a portal for users to create and manage tenants in the cluster based on service requirements.

  • Roles, computing resources, and storage resources are automatically created when tenants are created. By default, all rights on the new computing and storage resources are assigned to the tenant roles.
  • After the computing or storage resources of tenants are modified, the related role rights are updated automatically.

Manager also provides the multi-instance function so that users can use the HBase, Hive, or Spark component alone in the resource control and service isolation scenario. The multi-instance function is disabled by default and can be manually enabled.

Support for Multiple Languages

Manager supports multiple languages and automatically selects Chinese or English based on the browser language preference. If the browser preferred language is Chinese, Manager displays the portal in Chinese; if the browser preferred language is not Chinese, Manager displays the portal in English. You can also choose English or Chinese at the left corner.

Download
Updated: 2019-05-17

Document ID: EDOC1100074548

Views: 3105

Downloads: 36

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next