Ambari/iptables interaction

[Brian Jeltema <br...@digitalenvoy.net>]

I'm new to Ambari and am looking for clarification of how ambari interacts with iptables. I disabled iptables during installation as documented.
After completion of the install, we restarted iptables. However, whenever I do a stop/start cycle of the MapReduce service,
iptables is stopped on all of the cluster nodes. Is that expected behavior? If so, how do I override it?

TIA

Brian

Re: Ambari/iptables interaction

[Olivier Renault <or...@hortonworks.com>]

Sorry I'm no Ambari developer, so I will answer being assure that I will be
corrected if I'm saying something silly.

The file is coming out of ambari agent package so I guess you need to
modify the file on each node and restart the agent.

Hope it helps

Olivier
On 9 Jul 2013 13:49, "Brian Jeltema" <br...@digitalenvoy.net> wrote:

> Thanks. I see what needs to be changed, but I'm unclear about the
> mechanics. If I change the code on the Ambari server,
> will it automatically propagate to each agent? Or do I need to
> edit/restart each agent?
>
> TIA
>
> Brian
>
> On Jul 8, 2013, at 5:05 PM, Olivier Renault wrote:
>
> Hi Brian,
>
> For the time being, it looks like we're switching it off by default. If
> you would like to amend this behavior you probably want to modify
> /var/lib/ambari-agent/puppet/modules/hdp/manifests/init.pp
>
> Good luck,
> Olivier
>
>
> On 8 July 2013 18:29, Brian Jeltema <br...@digitalenvoy.net>wrote:
>
>> I'm new to Ambari and am looking for clarification of how ambari
>> interacts with iptables. I disabled iptables during installation as
>> documented.
>> After completion of the install, we restarted iptables. However, whenever
>> I do a stop/start cycle of the MapReduce service,
>> iptables is stopped on all of the cluster nodes. Is that expected
>> behavior? If so, how do I override it?
>>
>> TIA
>>
>> Brian
>
>
>
>

Re: Ambari/iptables interaction

[Brian Jeltema <br...@digitalenvoy.net>]

Thanks. I see what needs to be changed, but I'm unclear about the mechanics. If I change the code on the Ambari server,
will it automatically propagate to each agent? Or do I need to edit/restart each agent?

TIA

Brian

On Jul 8, 2013, at 5:05 PM, Olivier Renault wrote:

> Hi Brian, 
> 
> For the time being, it looks like we're switching it off by default. If you would like to amend this behavior you probably want to modify 
> /var/lib/ambari-agent/puppet/modules/hdp/manifests/init.pp
> 
> Good luck,
> Olivier
> 
> 
> On 8 July 2013 18:29, Brian Jeltema <br...@digitalenvoy.net> wrote:
> I'm new to Ambari and am looking for clarification of how ambari interacts with iptables. I disabled iptables during installation as documented.
> After completion of the install, we restarted iptables. However, whenever I do a stop/start cycle of the MapReduce service,
> iptables is stopped on all of the cluster nodes. Is that expected behavior? If so, how do I override it?
> 
> TIA
> 
> Brian
> 

Re: Ambari/iptables interaction

[Olivier Renault <or...@hortonworks.com>]

Hi Brian,

For the time being, it looks like we're switching it off by default. If you
would like to amend this behavior you probably want to modify
/var/lib/ambari-agent/puppet/modules/hdp/manifests/init.pp

Good luck,
Olivier


On 8 July 2013 18:29, Brian Jeltema <br...@digitalenvoy.net> wrote:

> I'm new to Ambari and am looking for clarification of how ambari interacts
> with iptables. I disabled iptables during installation as documented.
> After completion of the install, we restarted iptables. However, whenever
> I do a stop/start cycle of the MapReduce service,
> iptables is stopped on all of the cluster nodes. Is that expected
> behavior? If so, how do I override it?
>
> TIA
>
> Brian