Forge Home


Cloudera Impala Puppet Module


7,072 latest version

4.8 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Version information

  • 1.3.1 (latest)
  • 1.3.0
  • 1.2.0
  • 1.1.1
  • 1.1.0
  • 1.0.0
released Apr 19th 2017
This version is compatible with:
  • Puppet Enterprise 2023.7.x, 2023.6.x, 2023.5.x, 2023.4.x, 2023.3.x, 2023.2.x, 2023.1.x, 2023.0.x, 2021.7.x, 2021.6.x, 2021.5.x, 2021.4.x, 2021.3.x, 2021.2.x, 2021.1.x, 2021.0.x, 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x, 2017.2.x, 2017.1.x, 2016.5.x, 2016.4.x
  • Puppet >= 3.4.0
  • , , , ,

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'cesnet-impala', '1.3.1'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add cesnet-impala
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install cesnet-impala --version 1.3.1

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.



cesnet/impala — version 1.3.1 Apr 19th 2017


Build Status Puppet Forge

Table of Contents

  1. Module Description - What the module does and why it is useful
  2. Setup - The basics of getting started with impala
  3. Usage - Configuration options and additional functionality
  4. Reference - An under-the-hood peek at what the module is doing and how
  5. Limitations - OS compatibility, etc.
  6. Development - Guide for contributing to the module

Module Description

Management of Cloudera Impala cluster. All services can be separated across all nodes or collocated as needed.

Puppet >= 3.x is required.

Supported are:

  • Debian 7/wheezy
  • Debian 8/jessie
  • Ubuntu 14/trusty
  • RHEL and clones

Tested with CDH 5.4.7/5.5.0/5.10.0, Impala 2.2.0/2.3.0/2.5.0/2.7.0.


What impala affects

  • Packages: installs Impala packages as needed
  • Files modified:
  • */etc/impala/conf/**
  • /etc/default/impala
  • /usr/local/sbin/impmanager (when requested in features)
  • /usr/local/bin/impala (when not disabled in features)
  • Alternatives:
  • alternatives are used for /etc/impala/conf
  • this module switches to the new alternative by default, so the original configuration can be kept intact
  • Helper files:
  • */var/lib/impala/.puppet-**
  • Users:
  • impala system user and group are created (from packages or by puppet)
  • Secret Files:
  • permissions of keytab are modified (default location: /etc/security/keytabs/impala.service.keytab)
  • certificate files are copied to /var/lib/impala/*.pem
  • Services: setup and start Impala services as needed (catalog, server, statestore)

Setup Requirements

Hadoop cluster

Hadoop cluster is required. This puppet module should be applied after the Hadoop cluster is orchestrated. For example when using cesnet-hadoop module:

Class['::hadoop::common::hdfs::config'] -> Class['::impala::common::config']
Class['::hbase::common::config'] -> Class['::impala::common::config']

Some settings of Hadoop cluster are required:

  • dfs.datanode.hdfs-blocks-metadata.enabled=true
  • dfs.domain.socket.path set to location writable by datanodes

Native Hadoop library should be installed.

It is not recommended to install Impala nodes on HDFS Name Node: installing on Name Nodes provides no additional data locality, and executing queries with such a configuration might cause memory contention and negatively impact the HDFS Name Node.


Hive metastore service is required. You can use cesnet-hive puppet module for it (hive and hive::metastore classes), recommended with MySQL or PostgreSQL database backends (puppetlabs-postgresql or puppetlabs-mysql puppet modules for example).

Hive group (group ownership of HDFS directory /user/hive/warehouse) must be assigned to the impala user.

This is handled automatically. Just make sure the group parameter has the proper value (the same as used in hive).

  1. In deployment with Sentry: we're is using hive group by default and impala is assigned to that group:

    usermod -G hive -a impala

  2. In deployment without Sentry: no group assignment is done by default. When using group parameter, impala is assigned to that group (for example when using users group):

    usermod -G users -a impala

    In deployment without Sentry, all authenticated users are handled without authorization and have all impala user privileges in Hive metastore and HDFS. Use the group parameter in case the missing (permissive) authorization is not an issue. Enabling write access is not needed though - databases can be still created using Hive and they will have proper ownership in that case.


Beginning with Impala

Basic example:

class { 'impala':

include ::impala::frontend
include ::impala::statestore
include ::impala::catalog
include ::impala::server

Cluster example:

class { 'impala':
  catalog_hostname    => '',
  statestore_hostname => '',
  servers             => ['', '', ''],

node {
  include ::impala::frontend

node {
  include ::impala::statestore
  include ::impala::catalog

node /node\d+\.example\.com/ {
  include ::impala::server

###Cluster with more HDFS Name nodes

If there are used more HDFS Name Nodes in the Hadoop cluster (high availability, namespaces, ...), it is needed to have impala system user on all of them to authorization work properly. You could install Impala daemons (using impala::server), but just creating the user is enough (using impala::user).

Note, the impala::hdfs class is available too. It is not needed to use this class (it is here only for similarity with other addons), but it includes the impala::user, so impala::hdfs can be called instead.


  include ::impala::hdfs

  include ::impala::user

###Enable security

SASL GSSAPI module must be installed (installation is not part of this module yet).


  • realm: Kerberos realm, non-empty value enables the security
  • keytab

Client side:

-k, --kerberos option must be used in impala-shell after enabling security.

###SSL support

Certificate files must be prepared before launching impala puppet module:

  • /etc/grid-security/ca-chain.pem
  • /etc/grid-security/hostcery.pem
  • /etc/grid-security/hostkey.pem

Possible parameters:

  • https: true, false (or undef)
  • https_cachain
  • https_certificate
  • https_private_key

Client side:

--ssl option must be used in impala-shell after enabling SSL.

--ca_cert can be used for verifying of Impala certificates.


  • impala
  • impala::catalog: Impala Catalog (one in the cluster)
  • impala::catalog::config
  • impala::catalog::install
  • impala::catalog::service
  • impala::common::config
  • impala::common::daemon
  • impala::common::install
  • impala::common::postinstall
  • impala::frontend: Impala Frontend (on client)
  • impala::frontend::config
  • impala::frontend::install
  • impala::hdfs: HDFS initialization
  • impala::params
  • impala::server: Impala Server (mostly on each Hadoop Data Node)
  • impala::server::config
  • impala::server::install
  • impala::server::service
  • impala::statestore: Impala Statestore (one in the cluster)
  • impala::statestore::config
  • impala::statestore::install
  • impala::statestore::service
  • impala::user: Create impala system user, if needed

impala class

Configure Impala Puppet Module.


Switches the alternatives used for the configuration. Default: 'cluster' (Debian) or undef.

It can be used only when supported (for example with Cloudera distribution).


Default: $::fqdn.


Install also debug package and enable core dumps. Default: false.


Hive group on HDFS. Default: undef (without sentry), 'hive' (with sentry).

impala user is added to this group.

See also Setup requirements/Hive.


Enable additional features. Default: { launcher => true }.

Available features:

  • launcher: script in /usr/local to launch impala client
  • manager: script in /usr/local to start/stop all daemons relevant for given node


Enable SSL. Default: undef.


SSL CA chain file. Default: '/etc/grid-security/ca-chain.pem'.

It is optional, you can disable it by using ::undef. Without the CA chain servers won't check the certificates between Impala daemons.


SSL certificate file. Default: '/etc/grid-security/hostcert.pem'.


SSL certificate key. Default: '/etc/grid-security/hostkey.pem'.

The certificate key must be without passphrase.


Impala keytab file for catalog and statestore services. Default: '/etc/security/keytab/impala.service.keytab'.

It must contain principals:

  • impala/<HOSTNAME>@<REALM>


Daemon parameters to set. Default: undef.

Value is a hash with catalog, server, and statestore keys.


Kerberos realm. Default: undef.

Non-empty value enables Kerberos security.


Array of Impala server hostnames. Default: [$::fqdn].


Statestore service hostname. Default: $::fqdn.


Installs also headers on the frontend for development of user defined queries. Default: true.


Hadoop cluster and Hive metastore is required. See Setup Requirements.

This module setup Impala cluster and tries to not limit generic usage by doing other stuff. You can have your own repository with Hadoop SW, you can select which Kerberos implementation, or Java version to use. All of that you will probably already have for the Hadoop cluster.

You must install also SASL GSSAPI module package when using security.

Usage with sentry has not been tested.