Configuration

Additional configuration options

The default DC/OS Confluent ZooKeeper installation provides reasonable defaults for trying out the service, but may not be sufficient for production use. You may require a different configuration depending on the context of the deployment.

Installing with Custom Configuration

The following are some examples of how to customize the installation of your Confluent ZooKeeper instance.

In each case, you would create a new Confluent ZooKeeper instance using the custom configuration as follows:

dcos package install confluent-zookeeper --options=sample-confluent-zookeeper.json

We recommend that you store your custom configuration in source control.

Installing multiple instances

By default, the Confluent ZooKeeper service is installed with a service name of confluent-zookeeper. You may specify a different name using a custom service configuration as follows:

{
  "service": {
    "name": "confluent-zookeeper-other"
  }
}

When the above JSON configuration is passed to the package install confluent-zookeeper command via the --options argument, the new service will use the name specified in that JSON configuration:

dcos package install confluent-zookeeper --options=confluent-zookeeper-other.json

Multiple instances of Confluent ZooKeeper may be installed into your DC/OS cluster by customizing the name of each instance. For example, you might have one instance of Confluent ZooKeeper named confluent-zookeeper-staging and another named confluent-zookeeper-prod, each with its own custom configuration.

After specifying a custom name for your instance, it can be reached using dcos confluent-zookeeper CLI commands or directly over HTTP as described below.

WARNING: The service name cannot be changed after initial install. Changing the service name would require installing a new instance of the service against the new name, then copying over any data as necessary to the new instance.

Installing into folders

In DC/OS 1.10 and later, services may be installed into folders by specifying a slash-delimited service name. For example:

{
  "service": {
    "name": "/foldered/path/to/confluent-zookeeper"
  }
}

The above example will install the service under a path of foldered => path => to => confluent-zookeeper. It can then be reached using dcos confluent-zookeeper CLI commands or directly over HTTP as described below.

WARNING: The service folder location cannot be changed after initial install. Changing the folder location would require installing a new instance of the service against the new name, then copying over any data as necessary to the new instance.

Addressing named instances

After you’ve installed the service under a custom name or under a folder, it may be accessed from all dcos confluent-zookeeper CLI commands using the --name argument. By default, the --name value defaults to the name of the package, or confluent-zookeeper.

For example, if you had an instance named confluent-zookeeper-dev, the following command would invoke a pod list command against it:

dcos confluent-zookeeper --name=confluent-zookeeper-dev pod list

The same query would be over HTTP as follows:

curl -H "Authorization:token=$auth_token" <dcos_url>/service/confluent-zookeeper-dev/v1/pod

Likewise, if you had an instance in a folder like /foldered/path/to/confluent-zookeeper, the following command would invoke a pod list command against it:

dcos confluent-zookeeper --name=/foldered/path/to/confluent-zookeeper pod list

Similarly, it could be queried directly over HTTP as follows:

curl -H "Authorization:token=$auth_token" <dcos_url>/service/foldered/path/to/confluent-zookeeper-dev/v1/pod

You may add a -v (verbose) argument to any dcos confluent-zookeeper command to see the underlying HTTP queries that are being made. This can be a useful tool to see where the CLI is getting its information. In practice, dcos confluent-zookeeper commands are a thin wrapper around an HTTP interface provided by the DC/OS Confluent ZooKeeper Service itself.

Integration with DC/OS access controls

In Enterprise DC/OS, DC/OS access controls can be used to restrict access to your service. To give a non-superuser complete access to a service, grant them the following list of permissions:

dcos:adminrouter:service:marathon full
dcos:service:marathon:marathon:<service-name> full
dcos:service:adminrouter:<service-name> full
dcos:adminrouter:ops:mesos full
dcos:adminrouter:ops:slave full

Where <service-name> is your full service name, including the folder if it is installed in one.

Service Settings

Placement Constraints

Placement constraints allow you to customize where a service is deployed in the DC/OS cluster. Placement constraints use the Marathon operators syntax. For example, [["hostname", "UNIQUE"]] ensures that at most one pod instance is deployed per agent.

A common task is to specify a list of whitelisted systems to deploy to. To achieve this, use the following syntax for the placement constraint:

[["hostname", "LIKE", "10.0.0.159|10.0.1.202|10.0.3.3"]]

IMPORTANT: Be sure to include excess capacity in such a scenario so that if one of the whitelisted systems goes down, there is still enough capacity to repair your service.

Updating Placement Constraints

Clusters change, and as such so will your placement constraints. However, already running service pods will not be affected by changes in placement constraints. This is because altering a placement constraint might invalidate the current placement of a running pod, and the pod will not be relocated automatically as doing so is a destructive action. We recommend using the following procedure to update the placement constraints of a pod:

  • Update the placement constraint definition in the service.
  • For each affected pod, one at a time, perform a pod replace. This will (destructively) move the pod to be in accordance with the new placement constraints.

Zones Enterprise

Requires: DC/OS 1.11 Enterprise or later.

Placement constraints can be applied to DC/OS zones by referring to the @zone key. For example, one could spread pods across a minimum of three different zones by including this constraint:

[["@zone", "GROUP_BY", "3"]]

For the @zone constraint to be applied correctly, DC/OS must have Fault Domain Awareness enabled and configured.

WARNING: A service installed without a zone constraint cannot be updated to have one, and a service installed with a zone constraint may not have it removed.

Virtual networks

DC/OS Confluent ZooKeeper supports deployment on virtual networks on DC/OS (including the dcos overlay network), allowing each container (task) to have its own IP address and not use port resources on the agent machines. This can be specified by passing the following configuration during installation:

{
  "service": {
    "virtual_network_enabled": true
  }
}

NOTE: Once the service is deployed on a virtual network, it cannot be updated to use the host network.

User

By default, all pods’ containers will be started as system user “nobody”. If your system configured for using over system user (for instance, you may have externally mounted persistent volumes with root’s permissions), you can define the user by defining a custom value for the service’s property “user”, for example:

{
  "service": {
    "properties": {
      "user": "root"
    }
  }
}

Regions

The service parameter region can be used to deploy the service in an alternate region. By default the service is deployed in the “local” region, which is the region the DC/OS masters are running in. To install a service in a specific reason, include in its options:

{
  "service": {
    "region": "<region>"
  }
}

WARNING: A service may not be moved between regions.