Ambari2.7.3开启Https之后，Yarn Queue Manager（报错Couldn't connect to the cluster）解决

问题

Ambari2.7.3-HDP-3.1.0集群，开启Https协议之后，访问YARN Queue Manager时报错如下：

Couldn't connect to the cluster
Can't get secure connection to https://manager.bigdata:8080/api/v1/clusters/Gaia/?fields=Clusters%2Fversion. 
Truststore path or password is not set.

解决，在Ambari-Server节点执行以下操作

创建目录

mkdir /etc/ambari-server/certs
cd /etc/ambari-server/certs/
export AMBARI_SERVER_HOSTNAME=manager.bigdata

生成证书

注：在生成证书的过程中尽量保持输入密钥，密码时，前后保持一致。

1. openssl genrsa -passout pass:hadoop -out $AMBARI_SERVER_HOSTNAME.key 2048
2. openssl req -new -key $AMBARI_SERVER_HOSTNAME.key -out $AMBARI_SERVER_HOSTNAME.csr
3. openssl x509 -req -days 3650 -in $AMBARI_SERVER_HOSTNAME.csr -signkey $AMBARI_SERVER_HOSTNAME.key -out $AMBARI_SERVER_HOSTNAME.crt
   
   

安装

ambari-server setup-security

ambari-server restart

导入truststore

keytool -import -file /etc/ambari-server/certs/manager.bigdata.crt -alias ambari-server -keystore ambari-server-truststore

ambari-server setup-security

ambari-server restart

按照以上步骤执行，Yarn Queue Manager可以正常访问

参考博客：
https://blog.csdn.net/ZhouyuanLinli/article/details/78362096
https://www.ibm.com/support/knowledgecenter/en/SSCRJT_5.0.2/com.ibm.swg.im.bigsql.doc/doc/trb_yarn_queue_manager.html