Registering Control Planes

You can enable a connection between Cloudera on cloud and on premises for hybrid environment by connecting the Control Planes.

Before connecting the cloud Control Plane and on-premises Control Plane, you need to make sure that you have the correct identity provider set up for both Control Planes. An on-premises Control Plane can only be registered with a single cloud Control Plane. However, a cloud Control Plane can have multiple on-premises Control Plane connections. You can initiate the Control Plane connection from both Cloudera on cloud and Cloudera on premises.

Before you begin

Ensure that you meet the following Identity Provider (IdP) requirements:
- User creation must be completed in Cloudera on premises and the IdP is default in Cloudera on premises.
- You have the equivalent IdP that can be used across Cloudera on cloud and on premises, with the same SAML assertion configuration
  - Equivalency criteria - Users should have the same attributes - user ID, first name, last name, emails, groups in the IdP
- SAML should be selected as the default IdP on the on-premises control plane.

Option 1: Registering Control Planes using single action

You can use the single action registration when you want to connect the Control Planes from Cloudera on premises.

Navigate to Cloudera Management Console on premises.
Click Remote > Control Planes.
Click Get started with configuration.
Select the Control Plane Region. This will autopopulate the Control Plane Endpoint URL field.
Click Open Cloud Control Plane to open the Cloud Control Plane Authentication screen.
You will be prompted to log in.
Enter the Name for the control plane.
Select a SAML Identity Provider.
This should be the same as the SAML Identity Provider configured in the On-Premises Control Plane.
Optionally, you can provide a short description for the control plane.

Click Submit.

You will be redirected to the Cloudera Management Console. A status message will indicate that the connection has been initiated. The operation will require a few minutes to complete. Once the control plane has been created, the status changes to Active.

The Cloud Control Plane Details screen provides information on the control plane.


Column title	Description
Status	Starting: The control plane is being configured. Active: The control plane has been configured.
Last Updated	Date and time when the control plane was last updated.
URL	The public cloud URL.
Tenant ID	The Public Cloud tenant ID.
Region	Region of the server where the control plane is located.

Wait until the control plane status has changed to Active.

After the Control Planes are successfully connected, you need to complete the hybrid environment creation with setting up trust for hybrid environment.

Option 2: Registering Control Planes Using a Configuration File

Another method to connect your Cloudera on cloud and on-premises Control Plane is to use the configuration file for registration when you want to connect the Control Planes from Cloudera on cloud.

Initiate connection from Cloudera on cloud to on premises.

Navigate to Cloudera Management Console on cloud.
Click On premises > Control Planes.

The screen displays all on-premise Control Planes with the following information:


Column title	Description
Type
Status	Indicates the control plane status. Active: The control plane is ready. Inactive: Hover over the information icon for the required steps to make the control plane Active. Initiated: The control plane is still being configured.
Name	Name of the control panel.
Environments	Indicates the number of environments running on premises. Clicking the number redirects you to the Cloudera Management Console Environments page.
Access Key	Indicates the status of the access keys of the jumpgate agent on premises used to create the connection between control planes.
Last Updated	Date and time when the control plane was last updated.
Hamburger menu
Test Connection	Test the control plane connection.
Edit	Lets you edit the control plane SAML identity Provider and the (optional) Control Plane description.
Rotate Key	Create new access keys for the control plane and delete the old ones.
Remove	Delete the control plane from the public cloud and private cloud. Optionally, you can keep the on-premise cluster registrations.
Manage Access	Display and edit user access to the control plane.

Click the Add Control Plane button.
Complete the required information in the Connect on-premises Control Plane window.
1. 1. Provide the name of the Cloudera on cloud Control Plane.
  2. Provide the URL of the Cloudera on cloud Control Plane.
  3. Provide the Tenant ID of the Cloudera on cloud Control Plane
  4. Select the SAML Identity Provider on the Cloud control plane that is same or equivalent to the SAML Identity Provider on the on premises control plane.
  5. Provide a description for the Cloudera on cloud Control Plane.
Click Connect, and wait until your configuration file is generated.
Download the configuration file that is required for securely connecting the Cloudera on cloud Control Plane with the on premises Control Plane.
Click Done to close the window.
You are redirected to the Remote Control Planes page, where you will see the Control Plane status as Initiated.
In order to finish setting up the connection between Cloudera on cloud and on premises, you need to access the on-premises Control Plane and complete the registration.

Connect from Cloudera on premises to cloud.
1. Navigate to Cloudera Management Console on premises.
2. Click Remote > Control Planes.
3. Click Use Configuration File and select the configuration file created in the previous step.
4. Click Connect.
  The details of the Cloudera on cloud Control Plane will appear.
Finalize registration from Cloudera on cloud.
1. Navigate to the Cloudera Management Console on cloud.
2. Click On premises > Control Planes.
3. Click Test Connection on the Control Plane where the status is Initiated.
  If the connection is successfully set up, the Status of the Control Plane changes to Active.

After the Control Planes are successfully connected, you need to complete the hybrid environment creation with setting up trust for hybrid environment.