Step 12: Complete Post-Upgrade steps for upgrades to CDP Private Cloud Base
Steps to perform after upgrading a cluster.
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
Loading Filters ... 7.3.1 7.2.4 7.1.4 7.1.3 7.1.2 7.1.1 7.0.3 6.3.3 6.3.1 6.3.0 6.2.1 6.2.0 6.1.1 6.1.0 6.0.1 6.0.0 5.16 5.15 5.14 5.13 6.3.3 6.3.2 6.2.1 6.2.0 6.1.1 6.1.0 6.0.1 6.0.0 5.16 5.15 5.14 5.13 7.1.6 7.1.5 7.1.4 7.1.3 7.1.2 7.1.1 7.3.1 7.2.4 7.1.4 7.1.3 7.1.2 7.1.1
- HBase See Apache HBase post-upgrade tasks
- Apache Hive See Hive Post-Upgrade Tasks.
- Kafka
- Remove the following properties from the Kafka Broker Advanced
Configuration Snippet (Safety Valve) configuration property.
- Inter.broker.protocol.version
- log.message.format.version
- Save your changes.
- Perform a rolling restart:
- Select the Kafka service.
- Click .
- In the pop-up dialog box, select the options you want and click Rolling Restart.
- Click Close once the command has finished.
- Remove the following properties from the Kafka Broker Advanced
Configuration Snippet (Safety Valve) configuration property.
- Kudu See Upgrade Notes for Apache Kudu 1.12 / CDP 7.1
- Stream Messaging Manager See Configure SMM to monitor SRM replications
- YARN
- Scheduler: If you are using Fair Scheduler, you must migrate to Capacity Scheduler during the upgrade process, and once the upgrade is finished you need to manually fine tune it. For more information, see Manual configuration of scheduler properties.
- Considering logical processors in the
calculation: The
yarn.nodemanager.resource.count-logical-processors-as-cores
property was not present in CDH 5. In Cloudera Runtime 7.1.1 (and in CDH 6), it is set tofalse
by default, meaning that YARN does not consider logical processors in the calculation which can results in a 2x performance hit if Linux Container Executor and CGroups are enabled. To solve this issue, do the following:- In Cloudera Manager, navigate to .
- Find the YARN Service Advanced Configuration Snippet (Safety Valve) for yarn-site.xml property.
- Add the following
configuration:
yarn.nodemanager.resource.count-logical-processors-as-cores=true
Using this configuration snippet ensures that all nodes that need the configuration receive it. This also ensures different NodeManager groups are consistently configured.
- Restart the NodeManager.
- NodeManager recovery: By default the
yarn.nodemanager.recovery.enabled
property is set totrue
after upgrading from CDH to CDP. If in your source CDH cluster you disable the NodeManager recovery feature, and you want to keep that setting, you manually have to disable it again in the upgraded cluster. Note, that Cloudera recommends to have this feature enabled. If you are upgrading from a CDP source cluster to a CDP target cluster, the value your set for theyarn.nodemanager.recovery.enabled
property in your source cluster will be kept in your upgraded cluster. - Log
aggregation: In order to see the history of applications that were launched
before upgrade, do the following:
- In Cloudera Manager, navigate to .
- Set the following
configurations:
yarn.log-aggregation.TFile.remote-app-log-dir-suffix=logs
yarn.log-aggregation.IFile.remote-app-log-dir-suffix=logs-ifile
- Maximum
capacity: Set the
yarn.scheduler.capacity.<queuepath>.user-limit-factor
to a value that is greater than 1. This configuration will help to grow the queue usage beyond its configured capacity till its maximum capacity configured. - Ranger
PluginsThe following Ranger plugins are not enabled by default after the upgrade. If these services are configured in the cluster, you will need to manually enable the plugins in order for them to use Ranger:
- HBase
- Kudu
- Solr
- YARN: If you want to enable the Ranger YARN plugin, you have to migrate the ACLs manually. For more information, see Configure a resource-based policy: YARN.
- YARN
The following Ranger plugins are enabled after an upgrade:- Atlas
- HDFS
- Hive
- Hive on Tez
- Impala
- Kafka
- ZooKeeper
Ensure, that QuorumSSL (Secure ZooKeeper) is enabled only if QuorumSASL (Server to server SASL authentication) is also enabled. Note, that QuorumSSL is enabled by default if AutoTLS is enabled. If QuorumSSL is enabled without QuorumSASL, then the ZooKeeper cluster can be slow to start due to some known ZooKeeper limitations.
- Solr – See Cloudera Search post-upgrade tasks.
- Sentry – See Sentry to Ranger Permissions.
- Impala – See Apache Impala changes in CDP