ambari-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From adorosz...@apache.org
Subject [03/10] ambari git commit: AMBARI-21431. Update BigInsight configuration files to be compliant with XSD
Date Tue, 11 Jul 2017 15:25:38 GMT
http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-broker.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-broker.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-broker.xml
index 3da042b..de07b6b 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-broker.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-broker.xml
@@ -25,6 +25,7 @@
     <name>listeners</name>
     <value>PLAINTEXT://localhost:6667</value>
     <description>host and port where kafka broker will be accepting connnections. localhost will be subsituted with hostname.</description>
+    <on-ambari-upgrade add="false"/>
   </property>
   <property>
     <name>log.dirs</name>
@@ -33,6 +34,7 @@
       A comma-separated list of one or more directories in which Kafka data is stored.
       Each new partition that is created will be placed in the directory which currently has the fewest partitions.
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>directories</type>
     </value-attributes>
@@ -47,6 +49,7 @@
       path /chroot/path. Note that you must create this path yourself prior to starting the broker and consumers must use the
       same connection string.
     </description>
+    <on-ambari-upgrade add="false"/>
   </property>
   <property>
     <name>message.max.bytes</name>
@@ -56,6 +59,7 @@
       It is important that this property be in sync with the maximum fetch size your consumers use or
       else an unruly producer will be able to publish messages too large for consumers to consume.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>num.network.threads</name>
@@ -64,6 +68,7 @@
       The number of network threads that the server uses for handling network requests.
       You probably don't need to change this.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>num.io.threads</name>
@@ -71,11 +76,13 @@
     <description>
       The number of I/O threads that the server uses for executing requests. You should have at least as many threads as you have disks.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>queued.max.requests</name>
     <value>500</value>
     <description>The number of requests that can be queued up for processing by the I/O threads before the network threads stop reading in new requests.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>socket.send.buffer.bytes</name>
@@ -83,6 +90,7 @@
     <description>
       The SO_SNDBUFF buffer the server prefers for socket connections.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>socket.receive.buffer.bytes</name>
@@ -90,6 +98,7 @@
     <description>
       The SO_RCVBUFF buffer the server prefers for socket connections.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>socket.request.max.bytes</name>
@@ -97,6 +106,7 @@
     <description>
       The maximum request size the server will allow. This prevents the server from running out of memory and should be smaller than the Java heap size.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>num.partitions</name>
@@ -104,6 +114,7 @@
     <description>
         The default number of partitions per topic.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.segment.bytes</name>
@@ -112,6 +123,7 @@
       The maximum request size the server will allow.
       This prevents the server from running out of memory and should be smaller than the Java heap size.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.roll.hours</name>
@@ -119,6 +131,7 @@
     <description>
       This setting will force Kafka to roll a new log segment even if the log.segment.bytes size has not been reached.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.retention.bytes</name>
@@ -126,6 +139,7 @@
     <description>
       The amount of data to retain in the log for each topic-partitions. Note that this is the limit per-partition so multiply by the number of partitions to get the total data retained for the topic. Also note that if both log.retention.hours and log.retention.bytes are both set we delete a segment when either limit is exceeded.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.retention.hours</name>
@@ -133,12 +147,14 @@
     <description>
       The number of hours to keep a log segment before it is deleted, i.e. the default data retention window for all topics. Note that if both log.retention.hours and log.retention.bytes are both set we delete a segment when either limit is exceeded.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.cleanup.interval.mins</name>
     <value>10</value>
     <description>The frequency in minutes that the log cleaner checks whether any log segment is eligible for deletion to meet the retention policies.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.index.size.max.bytes</name>
@@ -148,6 +164,7 @@
       sparse file with this much space and shrink it down when the log rolls. If the index fills up we will roll a new log segment
       even if we haven't reached the log.segment.bytes limit.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>log.index.interval.bytes</name>
@@ -155,6 +172,7 @@
     <description>
       The byte interval at which we add an entry to the offset index. When executing a fetch request the server must do a linear scan for up to this many bytes to find the correct position in the log to begin and end the fetch. So setting this value to be larger will mean larger index files (and a bit more memory usage) but less scanning. However the server will never add more than one index entry per log append (even if more than log.index.interval worth of messages are appended). In general you probably don't need to mess with this value.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>auto.create.topics.enable</name>
@@ -162,26 +180,31 @@
     <description>
       Enable auto creation of topic on the server. If this is set to true then attempts to produce, consume, or fetch metadata for a non-existent topic will automatically create it with the default replication factor and number of partitions.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>controller.socket.timeout.ms</name>
     <value>30000</value>
-    <property>The socket timeout for commands from the partition management controller to the replicas.</property>
+    <description>The socket timeout for commands from the partition management controller to the replicas.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>controller.message.queue.size</name>
     <value>10</value>
     <description>The buffer size for controller-to-broker-channels</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>default.replication.factor</name>
     <value>1</value>
     <description>The default replication factor for automatically created topics.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.lag.time.max.ms</name>
     <value>10000</value>
     <description>If a follower hasn't sent any fetch requests for this window of time, the leader will remove the follower from ISR (in-sync replicas) and treat it as dead.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.lag.max.messages</name>
@@ -189,32 +212,38 @@
     <description>
       If a replica falls more than this many messages behind the leader, the leader will remove the follower from ISR and treat it as dead.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.socket.timeout.ms</name>
     <value>30000</value>
     <description>The socket timeout for network requests to the leader for replicating data.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.socket.receive.buffer.bytes</name>
     <value>65536</value>
     <description>The socket receive buffer for network requests to the leader for replicating data.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.fetch.max.bytes</name>
     <value>1048576</value>
     <description>The number of byes of messages to attempt to fetch for each partition in the fetch requests the replicas send to the leader.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.fetch.wait.max.ms</name>
     <value>500</value>
     <description>The maximum amount of time to wait time for data to arrive on the leader in the fetch requests sent by the replicas to the leader.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.fetch.min.bytes</name>
     <value>1</value>
     <description>Minimum bytes expected for each fetch response for the fetch requests from the replica to the leader. If not enough bytes, wait up to replica.fetch.wait.max.ms for this many bytes to arrive.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>num.replica.fetchers</name>
@@ -222,46 +251,55 @@
     <description>
       Number of threads used to replicate messages from leaders. Increasing this value can increase the degree of I/O parallelism in the follower broker.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>replica.high.watermark.checkpoint.interval.ms</name>
     <value>5000</value>
     <description>The frequency with which each replica saves its high watermark to disk to handle recovery.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>fetch.purgatory.purge.interval.requests</name>
     <value>10000</value>
     <description>The purge interval (in number of requests) of the fetch request purgatory.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>producer.purgatory.purge.interval.requests</name>
     <value>10000</value>
     <description>The purge interval (in number of requests) of the producer request purgatory.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>zookeeper.session.timeout.ms</name>
     <value>30000</value>
     <description>Zookeeper session timeout. If the server fails to heartbeat to zookeeper within this period of time it is considered dead. If you set this too low the server may be falsely considered dead; if you set it too high it may take too long to recognize a truly dead server.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>zookeeper.connection.timeout.ms</name>
     <value>25000</value>
     <description>The maximum amount of time that the client waits to establish a connection to zookeeper.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>zookeeper.sync.time.ms</name>
     <value>2000</value>
     <description>How far a ZK follower can be behind a ZK leader.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>controlled.shutdown.enable</name>
     <value>true</value>
     <description>Enable controlled shutdown of the broker. If enabled, the broker will move all leaders on it to some other brokers before shutting itself down. This reduces the unavailability window during shutdown.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>controlled.shutdown.max.retries</name>
     <value>3</value>
     <description>Number of retries to complete the controlled shutdown successfully before executing an unclean shutdown.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>controlled.shutdown.retry.backoff.ms</name>
@@ -269,6 +307,7 @@
     <description>
       Backoff time between shutdown retries.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka.metrics.reporters</name>
@@ -276,6 +315,7 @@
     <description>
       kafka timeline metrics reporter
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <empty-value-valid>true</empty-value-valid>
     </value-attributes>
@@ -284,26 +324,31 @@
     <name>kafka.timeline.metrics.reporter.enabled</name>
     <value>true</value>
     <description>Kafka timeline metrics reporter enable</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka.timeline.metrics.host</name>
     <value>{{metric_collector_host}}</value>
     <description>Timeline host</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka.timeline.metrics.port</name>
     <value>{{metric_collector_port}}</value>
     <description>Timeline port</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka.timeline.metrics.reporter.sendInterval</name>
     <value>5900</value>
     <description>Timeline metrics reporter send interval</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka.timeline.metrics.maxRowCacheSize</name>
     <value>10000</value>
     <description>Timeline metrics reporter send interval</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>external.kafka.metrics.exclude.prefix</name>
@@ -311,6 +356,7 @@
     <description>
       Exclude metrics starting with these prefixes from being collected.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>external.kafka.metrics.include.prefix</name>
@@ -318,41 +364,49 @@
     <description>
       These metrics would be included even if the exclude prefix omits them.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>auto.leader.rebalance.enable</name>
     <value>true</value>
     <description>Enables auto leader balancing. A background thread checks and triggers leader balance if required at regular intervals</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>num.recovery.threads.per.data.dir</name>
     <value>1</value>
     <description>The number of threads per data directory to be used for log recovery at startup and flushing at shutdown</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>min.insync.replicas</name>
     <value>1</value>
     <description>define the minimum number of replicas in ISR needed to satisfy a produce request with required.acks=-1 (or all)</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>leader.imbalance.per.broker.percentage</name>
     <value>10</value>
     <description>The ratio of leader imbalance allowed per broker. The controller would trigger a leader balance if it goes above this value per broker. The value is specified in percentage.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>leader.imbalance.check.interval.seconds</name>
     <value>300</value>
     <description>The frequency with which the partition rebalance check is triggered by the controller</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offset.metadata.max.bytes</name>
     <value>4096</value>
     <description>The maximum size for a metadata entry associated with an offset commit</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.load.buffer.size</name>
     <value>5242880</value>
     <description>Batch size for reading from the offsets segments when loading offsets into the cache.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.topic.replication.factor</name>
@@ -361,51 +415,61 @@
     To ensure that the effective replication factor of the offsets topic is the configured value,
     the number of alive brokers has to be at least the replication factor at the time of the
     first request for the offsets topic. If not, either the offsets topic creation will fail or it will get a replication factor of min(alive brokers, configured replication factor).</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.topic.num.partitions</name>
     <value>50</value>
     <description>The number of partitions for the offset commit topic (should not change after deployment)</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.topic.segment.bytes</name>
     <value>104857600</value>
     <description>The offsets topic segment bytes should be kept relatively small in order to facilitate faster log compaction and cache loads</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.topic.compression.codec</name>
     <value>0</value>
     <description>Compression codec for the offsets topic - compression may be used to achieve \"atomic\" commits. Default is NoCompression. For Gzip add value 1 , SnappyCompression add value 2, LZ4CompressionCodec 3.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.retention.minutes</name>
     <value>86400000</value>
     <description>Log retention window in minutes for offsets topic</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.retention.check.interval.ms</name>
     <value>600000</value>
     <description>Frequency at which to check for stale offsets</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.commit.timeout.ms</name>
     <value>5000</value>
     <description>Offset commit will be delayed until all replicas for the offsets topic receive the commit or this timeout is reached. This is similar to the producer request timeout.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>offsets.commit.required.acks</name>
     <value>-1</value>
     <description>The required acks before the commit can be accepted. In general, the default (-1) should not be overridden</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>delete.topic.enable</name>
     <value>false</value>
     <description>Enables delete topic. Delete topic through the admin tool will have no effect if this config is turned off</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>compression.type</name>
     <description>Specify the final compression type for a given topic. This configuration accepts the standard compression codecs ('gzip', 'snappy', lz4). It additionally accepts 'uncompressed' which is equivalent to no compression; and 'producer' which means retain the original compression codec set by the producer.</description>
     <value>producer</value>
+    <on-ambari-upgrade add="true"/>
   </property>
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-env.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-env.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-env.xml
index 7b12ebb..cc22c91 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-env.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-env.xml
@@ -25,6 +25,7 @@
     <name>kafka_user</name>
     <display-name>Kafka User</display-name>
     <value>kafka</value>
+    <on-ambari-upgrade add="true"/>
     <property-type>USER</property-type>
     <description></description>
   </property>
@@ -32,12 +33,14 @@
     <name>kafka_log_dir</name>
     <value>/var/log/kafka</value>
     <description></description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka_pid_dir</name>
     <display-name>Kafka PID dir</display-name>
     <value>/var/run/kafka</value>
     <description></description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>directory</type>
       <editable-only-at-install>true</editable-only-at-install>
@@ -48,11 +51,13 @@
     <name>kafka_user_nofile_limit</name>
     <value>32000</value>
     <description>Max open files limit setting for KAFKA user.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>kafka_user_nproc_limit</name>
     <value>16000</value>
     <description>Max number of processes limit setting for KAFKA user.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <!-- kafka-env.sh -->
@@ -76,5 +81,6 @@ if [ -e "/usr/lib/ambari-metrics-kafka-sink/ambari-metrics-kafka-sink.jar" ]; th
   export CLASSPATH=$CLASSPATH:/usr/lib/ambari-metrics-kafka-sink/lib/*
 fi
     </value>
+    <on-ambari-upgrade add="true"/>
   </property>
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-log4j.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-log4j.xml
index 51a3b0f..aea7cca 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-log4j.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/configuration/kafka-log4j.xml
@@ -111,6 +111,7 @@ log4j.logger.state.change.logger=TRACE, stateChangeAppender
 log4j.additivity.state.change.logger=false
 
    </value>
+    <on-ambari-upgrade add="true"/>
   </property>
 
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/kerberos-env.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/kerberos-env.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/kerberos-env.xml
index 8441586..5aa1d29 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/kerberos-env.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/kerberos-env.xml
@@ -23,13 +23,12 @@
 <configuration supports_final="false" supports_do_not_extend="true">
   <property require-input="true">
     <name>kdc_type</name>
-    <display-name>KDC type</display-name>
-    <value>mit-kdc</value>
     <description>
       The type of KDC being used. Either mit-kdc or active-directory
     </description>
     <value>mit-kdc</value>
     <display-name>KDC type</display-name>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>componentHost</type>
       <overridable>false</overridable>
@@ -44,6 +43,7 @@
     </description>
     <value>true</value>
     <display-name>Manage Kerberos Identities</display-name>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <visible>false</visible>
       <overridable>false</overridable>
@@ -60,6 +60,7 @@
       compatible with MIT Kerberos 5 version 1.10.3 in command line options and behaviors.
     </description>
     <value>true</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>boolean</type>
       <overridable>false</overridable>
@@ -73,6 +74,7 @@
       The URL to the Active Directory LDAP Interface
     </description>
     <value/>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>host</type>
       <visible>false</visible>
@@ -86,6 +88,7 @@
     <description>
       The distinguished name (DN) of the container used store service principals
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <visible>false</visible>
       <overridable>false</overridable>
@@ -100,6 +103,7 @@
       The supported list of session key encryption types that should be returned by the KDC.
     </description>
     <value>aes des3-cbc-sha1 rc4 des-cbc-md5</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>multiLine</type>
       <overridable>false</overridable>
@@ -113,6 +117,7 @@
     </description>
     <display-name>Realm name</display-name>
     <value/>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>host</type>
       <editable-only-at-install>true</editable-only-at-install>
@@ -129,6 +134,7 @@
     </description>
     <display-name>KDC hosts</display-name>
     <value/>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -141,6 +147,7 @@
       The IP address or FQDN for the KDC Kerberos administrative host. Optionally a port number may be included.
     </description>
     <value/>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>host</type>
       <overridable>false</overridable>
@@ -154,6 +161,7 @@
       A comma-delimited list of search paths to use to find Kerberos utilities like kadmin and kinit.
     </description>
     <value>/usr/bin, /usr/kerberos/bin, /usr/sbin, /usr/lib/mit/bin, /usr/lib/mit/sbin</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
       <type>multiLine</type>
@@ -167,6 +175,7 @@
       The length required length for generated passwords.
     </description>
     <value>20</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -179,6 +188,7 @@
       The minimum number of lowercase letters (a-z) required in generated passwords
     </description>
     <value>1</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>int</type>
       <overridable>false</overridable>
@@ -192,6 +202,7 @@
       The minimum number of uppercase letters (A-Z) required in generated passwords
     </description>
     <value>1</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>int</type>
       <overridable>false</overridable>
@@ -205,6 +216,7 @@
       The minimum number of digits (0-9) required in generated passwords
     </description>
     <value>1</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>int</type>
       <overridable>false</overridable>
@@ -218,6 +230,7 @@
       The minimum number of punctuation characters (?.!$%^*()-_+=~) required in generated passwords
     </description>
     <value>1</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>int</type>
       <overridable>false</overridable>
@@ -231,6 +244,7 @@
       The minimum number of whitespace characters required in generated passwords
     </description>
     <value>0</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>int</type>
       <overridable>false</overridable>
@@ -244,6 +258,7 @@
       The principal name to use when executing the Kerberos service check
     </description>
     <value>${cluster_name}-${short_date}</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -256,6 +271,7 @@
       Force principal names to resolve to lowercase local usernames in auth-to-local rules
     </description>
     <value>false</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
       <type>boolean</type>
@@ -286,6 +302,7 @@
   "userAccountControl": "66048"
 }
     </value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>content</type>
       <empty-value-valid>true</empty-value-valid>
@@ -300,6 +317,7 @@
       The set of attributes to use when creating a new Kerberos identity in the relevant (MIT) KDC.
     </description>
     <value/>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <empty-value-valid>true</empty-value-valid>
       <overridable>false</overridable>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/krb5-conf.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/krb5-conf.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/krb5-conf.xml
index d6a82e8..bc76238 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/krb5-conf.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/configuration/krb5-conf.xml
@@ -28,6 +28,7 @@
       A comma-separated list of domain names used to map server host names to the Realm name (e.g. .example.com,example.com). This is optional
     </description>
     <value/>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <empty-value-valid>true</empty-value-valid>
       <overridable>false</overridable>
@@ -41,6 +42,7 @@
       Indicates whether your krb5.conf file should be managed by the wizard or should you manage it yourself
     </description>
     <value>true</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
       <type>boolean</type>
@@ -52,6 +54,7 @@
     <display-name>krb5-conf directory path</display-name>
     <description>The krb5.conf configuration directory</description>
     <value>/etc</value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>directory</type>
       <overridable>false</overridable>
@@ -101,6 +104,7 @@
 
 {# Append additional realm declarations below #}
     </value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>content</type>
       <overridable>false</overridable>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-log4j.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-log4j.xml
index eac64f1..b8857a9 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-log4j.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-log4j.xml
@@ -79,5 +79,6 @@
     <description>
       content for log4j.properties file for Knox.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-site.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-site.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-site.xml
index d23314d..23502f1 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-site.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/gateway-site.xml
@@ -27,42 +27,49 @@ limitations under the License.
         <name>gateway.port</name>
         <value>8443</value>
         <description>The HTTP port for the Gateway.</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
     <property>
         <name>gateway.path</name>
         <value>gateway</value>
         <description>The default context path for the gateway.</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
     <property>
         <name>gateway.gateway.conf.dir</name>
         <value>deployments</value>
         <description>The directory within GATEWAY_HOME that contains gateway topology files and deployments.</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
     <property>
         <name>gateway.hadoop.kerberos.secured</name>
         <value>false</value>
         <description>Boolean flag indicating whether the Hadoop cluster protected by Gateway is secured with Kerberos</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
     <property>
         <name>java.security.krb5.conf</name>
         <value>/etc/knox/conf/krb5.conf</value>
         <description>Absolute path to krb5.conf file</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
     <property>
         <name>java.security.auth.login.config</name>
         <value>/etc/knox/conf/krb5JAASLogin.conf</value>
         <description>Absolute path to JASS login config file</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
     <property>
         <name>sun.security.krb5.debug</name>
         <value>true</value>
         <description>Boolean flag indicating whether to enable debug messages for krb5 authentication</description>
+      <on-ambari-upgrade add="true"/>
     </property>
 
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/knox-env.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/knox-env.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/knox-env.xml
index 6443438..ec15d06 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/knox-env.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/knox-env.xml
@@ -27,6 +27,7 @@
         <name>knox_master_secret</name>
       <display-name>Knox Master Secret</display-name>
       <value></value>
+      <on-ambari-upgrade add="true"/>
       <property-type>PASSWORD</property-type>
       <description>password to use as the master secret</description>
       <value-attributes>
@@ -38,6 +39,7 @@
     <property>
         <name>knox_user</name>
         <value>knox</value>
+        <on-ambari-upgrade add="true"/>
         <property-type>USER</property-type>
         <description>Knox Username.</description>
     </property>
@@ -45,6 +47,7 @@
     <property>
         <name>knox_group</name>
         <value>knox</value>
+        <on-ambari-upgrade add="true"/>
         <property-type>GROUP</property-type>
         <description>Knox Group.</description>
     </property>
@@ -54,6 +57,7 @@
       <display-name>Knox PID dir</display-name>
       <value>/var/run/knox</value>
       <description>Knox PID dir.</description>
+      <on-ambari-upgrade add="true"/>
       <value-attributes>
         <type>directory</type>
         <editable-only-at-install>true</editable-only-at-install>
@@ -66,6 +70,7 @@
       <display-name>Knox Logs dir</display-name>
       <value>/var/log/knox</value>
       <description>Knox Log dir.</description>
+      <on-ambari-upgrade add="true"/>
       <value-attributes>
         <type>directory</type>
         <editable-only-at-install>true</editable-only-at-install>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ldap-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ldap-log4j.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ldap-log4j.xml
index 21e1c4e..9d2a07c 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ldap-log4j.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ldap-log4j.xml
@@ -62,5 +62,6 @@
     <description>
       content for log4j.properties file for the demo LDAP that comes with Knox.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-audit.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-audit.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-audit.xml
index ec19831..314222f 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-audit.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-audit.xml
@@ -24,6 +24,7 @@
     <name>xasecure.audit.is.enabled</name>
     <value>true</value>
     <description>Is Audit enabled?</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -31,6 +32,7 @@
     <value>false</value>
     <display-name>Audit to DB</display-name>
     <description>Is Audit to DB enabled?</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>boolean</type>
     </value-attributes>
@@ -46,17 +48,20 @@
     <name>xasecure.audit.destination.db.jdbc.url</name>
     <value>{{audit_jdbc_url}}</value>
     <description>Audit DB JDBC URL</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.audit.destination.db.user</name>
     <value>{{xa_audit_db_user}}</value>
     <description>Audit DB JDBC User</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.audit.destination.db.password</name>
     <value>crypted</value>
+    <on-ambari-upgrade add="true"/>
     <property-type>PASSWORD</property-type>
     <description>Audit DB JDBC Password</description>
   </property>
@@ -65,18 +70,21 @@
     <name>xasecure.audit.destination.db.jdbc.driver</name>
     <value>{{jdbc_driver}}</value>
     <description>Audit DB JDBC Driver</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.audit.credential.provider.file</name>
     <value>jceks://file{{credential_file}}</value>
     <description>Credential file store</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.audit.destination.db.batch.filespool.dir</name>
     <value>/var/log/knox/audit/db/spool</value>
     <description>/var/log/knox/audit/db/spool</description>
+    <on-ambari-upgrade add="true"/>
   </property>  
 
   <property>
@@ -84,6 +92,7 @@
     <value>true</value>
     <display-name>Audit to HDFS</display-name>
     <description>Is Audit to HDFS enabled?</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>boolean</type>
     </value-attributes>
@@ -99,6 +108,7 @@
     <name>xasecure.audit.destination.hdfs.dir</name>
     <value>hdfs://NAMENODE_HOSTNAME:8020/ranger/audit</value>
     <description>HDFS folder to write audit to, make sure the service user has requried permissions</description>
+    <on-ambari-upgrade add="true"/>
     <depends-on>
       <property>
         <type>ranger-env</type>
@@ -111,6 +121,7 @@
     <name>xasecure.audit.destination.hdfs.batch.filespool.dir</name>
     <value>/var/log/knox/audit/hdfs/spool</value>
     <description>/var/log/knox/audit/hdfs/spool</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   
   <!-- Removing auditing to Solr   
@@ -119,6 +130,7 @@
     <value>false</value>
     <display-name>Audit to SOLR</display-name>
     <description>Is Solr audit enabled?</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>boolean</type>
     </value-attributes>
@@ -134,6 +146,7 @@
     <name>xasecure.audit.destination.solr.urls</name>
     <value></value>
     <description>Solr URL</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <empty-value-valid>true</empty-value-valid>
     </value-attributes>
@@ -149,6 +162,7 @@
     <name>xasecure.audit.destination.solr.zookeepers</name>
     <value>NONE</value>
     <description>Solr Zookeeper string</description>
+    <on-ambari-upgrade add="true"/>
     <depends-on>
       <property>
         <type>ranger-admin-site</type>
@@ -161,6 +175,7 @@
     <name>xasecure.audit.destination.solr.batch.filespool.dir</name>
     <value>/var/log/knox/audit/solr/spool</value>
     <description>/var/log/knox/audit/solr/spool</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   -->
     
@@ -169,6 +184,7 @@
     <value>false</value>
     <display-name>Audit provider summary enabled</display-name>
     <description>Enable Summary audit?</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>boolean</type>
     </value-attributes>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-plugin-properties.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-plugin-properties.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-plugin-properties.xml
index 2474baa..bd39f36 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-plugin-properties.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-plugin-properties.xml
@@ -25,6 +25,7 @@
     <value>ambari-qa</value>
     <display-name>Policy user for KNOX</display-name>
     <description>This user must be system user and also present at Ranger admin portal</description>
+    <on-ambari-upgrade add="false"/>
   </property> 
 
   <property>
@@ -34,6 +35,7 @@
     <value-attributes>
       <empty-value-valid>true</empty-value-valid>
     </value-attributes>
+    <on-ambari-upgrade add="false"/>
   </property>
 
   <property>
@@ -51,6 +53,7 @@
       <type>boolean</type>
       <overridable>false</overridable>
     </value-attributes>
+    <on-ambari-upgrade add="false"/>
   </property>
 
   <property>
@@ -58,6 +61,7 @@
     <value>admin</value>
     <display-name>Ranger repository config user</display-name>
     <description>Used for repository creation on ranger admin</description>
+    <on-ambari-upgrade add="false"/>
   </property> 
 
   <property>
@@ -66,6 +70,7 @@
     <display-name>Ranger repository config password</display-name>
     <property-type>PASSWORD</property-type>
     <description>Used for repository creation on ranger admin</description>
+    <on-ambari-upgrade add="false"/>
   </property> 
 
   <property>
@@ -73,6 +78,7 @@
     <value>/usr/iop/current/knox-server</value>
     <display-name>Knox Home</display-name>
     <description>Knox home folder</description>
+    <on-ambari-upgrade add="false"/>
   </property>
   
   <!-- Properties from HDP 2.3 --> 
@@ -83,128 +89,153 @@
   <property>
     <name>XAAUDIT.DB.IS_ENABLED</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.IS_ENABLED</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.DESTINATION_DIRECTORY</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.LOCAL_BUFFER_DIRECTORY</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.LOCAL_ARCHIVE_DIRECTORY</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.DESTINTATION_FILE</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.DESTINTATION_FLUSH_INTERVAL_SECONDS</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.DESTINTATION_ROLLOVER_INTERVAL_SECONDS</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.DESTINTATION_OPEN_RETRY_INTERVAL_SECONDS</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.LOCAL_BUFFER_FILE</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.LOCAL_BUFFER_FLUSH_INTERVAL_SECONDS</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.LOCAL_BUFFER_ROLLOVER_INTERVAL_SECONDS</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>XAAUDIT.HDFS.LOCAL_ARCHIVE_MAX_FILE_COUNT</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>SSL_KEYSTORE_FILE_PATH</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>SSL_KEYSTORE_PASSWORD</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>SSL_TRUSTSTORE_FILE_PATH</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>SSL_TRUSTSTORE_PASSWORD</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
   
   <property>
     <name>POLICY_MGR_URL</name>
     <deleted>true</deleted>    
+    <on-ambari-upgrade add="true"/>
   </property> 
   
   <property>
     <name>SQL_CONNECTOR_JAR</name>
     <deleted>true</deleted>  
+    <on-ambari-upgrade add="true"/>
   </property> 
   
   <property>
     <name>XAAUDIT.DB.FLAVOUR</name>
     <deleted>true</deleted>    
+    <on-ambari-upgrade add="true"/>
   </property> 
   
   <property>
     <name>XAAUDIT.DB.DATABASE_NAME</name>
     <deleted>true</deleted>   
+    <on-ambari-upgrade add="true"/>
   </property> 
   
   <property>
     <name>XAAUDIT.DB.USER_NAME</name>
     <deleted>true</deleted>   
+    <on-ambari-upgrade add="true"/>
   </property> 
   
   <property>
     <name>XAAUDIT.DB.PASSWORD</name>
     <deleted>true</deleted>    
+    <on-ambari-upgrade add="true"/>
   </property>
   
   <property>
     <name>XAAUDIT.DB.HOSTNAME</name>
     <deleted>true</deleted>   
+    <on-ambari-upgrade add="true"/>
   </property>
   
   <property>
     <name>REPOSITORY_NAME</name>
     <deleted>true</deleted>    
+    <on-ambari-upgrade add="true"/>
   </property>
   
  -->
 
-</configuration>
\ No newline at end of file
+</configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-policymgr-ssl.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-policymgr-ssl.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-policymgr-ssl.xml
index 4ccf1f3..6db44ce 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-policymgr-ssl.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-policymgr-ssl.xml
@@ -24,11 +24,13 @@
     <name>xasecure.policymgr.clientssl.keystore</name>
     <value>/usr/iop/current/knox-server/conf/ranger-plugin-keystore.jks</value>
     <description>Java Keystore files</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.policymgr.clientssl.keystore.password</name>
     <value>myKeyFilePassword</value>
+    <on-ambari-upgrade add="true"/>
     <property-type>PASSWORD</property-type>
     <description>password for keystore</description>
   </property>
@@ -37,11 +39,13 @@
     <name>xasecure.policymgr.clientssl.truststore</name>
     <value>/usr/iop/current/knox-server/conf/ranger-plugin-truststore.jks</value>
     <description>java truststore file</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.policymgr.clientssl.truststore.password</name>
     <value>changeit</value>
+    <on-ambari-upgrade add="true"/>
     <property-type>PASSWORD</property-type>
     <description>java  truststore password</description>
   </property>
@@ -50,12 +54,14 @@
     <name>xasecure.policymgr.clientssl.keystore.credential.file</name>
     <value>jceks://file{{credential_file}}</value>
     <description>java  keystore credential file</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xasecure.policymgr.clientssl.truststore.credential.file</name>
     <value>jceks://file{{credential_file}}</value>
     <description>java  truststore credential file</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
-</configuration>
\ No newline at end of file
+</configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-security.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-security.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-security.xml
index e627d08..486c50f 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-security.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/ranger-knox-security.xml
@@ -24,36 +24,42 @@
     <name>ranger.plugin.knox.service.name</name>
     <value>{{repo_name}}</value>
     <description>Name of the Ranger service containing policies for this Knox instance</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>ranger.plugin.knox.policy.source.impl</name>
     <value>org.apache.ranger.admin.client.RangerAdminJersey2RESTClient</value>
     <description>Class to retrieve policies from the source</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>ranger.plugin.knox.policy.rest.url</name>
     <value>{{policymgr_mgr_url}}</value>
     <description>URL to Ranger Admin</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>ranger.plugin.knox.policy.rest.ssl.config.file</name>
     <value>/usr/iop/current/knox-server/conf/ranger-policymgr-ssl.xml</value>
     <description>Path to the file containing SSL details to contact Ranger Admin</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>ranger.plugin.knox.policy.pollIntervalMs</name>
     <value>30000</value>
     <description>How often to poll for changes in policies?</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>ranger.plugin.knox.policy.cache.dir</name>
     <value>/etc/ranger/{{repo_name}}/policycache</value>
     <description>Directory where Ranger policies are cached after successful retrieval from the source</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
-</configuration>
\ No newline at end of file
+</configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/topology.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/topology.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/topology.xml
index b458855..35e715c 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/topology.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/topology.xml
@@ -167,6 +167,7 @@
     <description>
         The configuration specifies the Hadoop cluster services Knox will provide access to.
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
        <empty-value-valid>true</empty-value-valid>
        <show-property-name>false</show-property-name>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/users-ldif.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/users-ldif.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/users-ldif.xml
index ce19feb..6d54bd7 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/users-ldif.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KNOX/configuration/users-ldif.xml
@@ -131,6 +131,7 @@ member: uid=sam,ou=people,dc=hadoop,dc=apache,dc=org
         <description>
             content for users-ldif file for the demo LDAP that comes with Knox.
         </description>
+        <on-ambari-upgrade add="true"/>
         <value-attributes>
           <show-property-name>false</show-property-name>
         </value-attributes>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-env.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-env.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-env.xml
index b335e77..fbf1d2f 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-env.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-env.xml
@@ -25,6 +25,7 @@
     <name>oozie_user</name>
     <display-name>Oozie User</display-name>
     <value>oozie</value>
+    <on-ambari-upgrade add="true"/>
     <property-type>USER</property-type>
     <description>Oozie User.</description>
   </property>
@@ -32,12 +33,14 @@
     <name>oozie_admin_users</name>
     <value>{oozie_user}, oozie-admin</value>
     <description>Oozie admin users.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie_database</name>
     <display-name>Oozie Database</display-name>
     <value>New Derby Database</value>
     <description>Oozie Server Database.</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -46,12 +49,14 @@
     <name>oozie_derby_database</name>
     <value>Derby</value>
     <description>Oozie Derby Database</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie_data_dir</name>
     <display-name>Oozie Data Dir</display-name>
     <value>/hadoop/oozie/data</value>
     <description>Data directory in which the Oozie DB exists</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>directory</type>
       <empty-value-valid>true</empty-value-valid>
@@ -63,6 +68,7 @@
     <display-name>Oozie Log Dir</display-name>
     <value>/var/log/oozie</value>
     <description>Directory for oozie logs</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>directory</type>
       <editable-only-at-install>true</editable-only-at-install>
@@ -74,6 +80,7 @@
     <display-name>Oozie PID Dir</display-name>
     <value>/var/run/oozie</value>
     <description>Directory in which the pid files for oozie reside.</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>directory</type>
       <editable-only-at-install>true</editable-only-at-install>
@@ -85,6 +92,7 @@
     <display-name>Oozie Server Admin Port</display-name>
     <value>11001</value>
     <description>The admin port Oozie server runs.</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
       <type>int</type>
@@ -94,16 +102,19 @@
     <name>oozie_initial_heapsize</name>
     <value>1024</value>
     <description>Oozie initial heap size.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie_heapsize</name>
     <value>2048</value>
     <description>Oozie heap size.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie_permsize</name>
     <value>256</value>
     <description>Oozie permanent generation size.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
 
@@ -184,6 +195,7 @@ export JAVA_LIBRARY_PATH={{hadoop_lib_home}}/native
 export OOZIE_CLIENT_OPTS="${OOZIE_CLIENT_OPTS} -Doozie.connection.retry.count=5 "
 
     </value>
+    <on-ambari-upgrade add="true"/>
   </property>
 
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-log4j.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-log4j.xml
index 0f44359..6927923 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-log4j.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-log4j.xml
@@ -141,6 +141,7 @@
       log4j.logger.org.hsqldb=WARN, oozie
       log4j.logger.org.apache.hadoop.security.authentication.server=WARN, oozie
     </value>
+    <on-ambari-upgrade add="true"/>
   </property>
 
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-site.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-site.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-site.xml
index 5196811..e659c03 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-site.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/configuration/oozie-site.xml
@@ -27,6 +27,7 @@
     <name>oozie.base.url</name>
     <value>http://localhost:11000/oozie</value>
     <description>Base Oozie URL.</description>
+    <on-ambari-upgrade add="false"/>
   </property>
 
   <property>
@@ -35,6 +36,7 @@
     <description>
       The Oozie system ID.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -43,6 +45,7 @@
     <description>
       System mode for Oozie at startup.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -52,6 +55,7 @@
       Specifies whether security (user name/admin role) is enabled or not.
       If disabled any user can manage Oozie system and manage any job.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -60,6 +64,7 @@
     <description>
       Jobs older than this value, in days, will be purged by the PurgeService.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -68,18 +73,21 @@
     <description>
       Interval at which the purge service will run, in seconds.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>oozie.service.CallableQueueService.queue.size</name>
     <value>1000</value>
     <description>Max callable queue size</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>oozie.service.CallableQueueService.threads</name>
     <value>10</value>
     <description>Number of threads used for executing callables</description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -92,6 +100,7 @@
       All commands that use action executors (action-start, action-end, action-kill and action-check) use
       the action type as the callable type.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -100,6 +109,7 @@
     <description>Default timeout for a coordinator action input check (in minutes) for normal job.
       -1 means infinite timeout
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   
   <property>
@@ -110,6 +120,7 @@
       this check or submit coordinators with frequencies faster than 5 minutes: doing so can cause unintended behavior and
       additional system stress.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -119,6 +130,7 @@
     <description>
       Oozie DataBase Name
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>database</type>
       <overridable>false</overridable>
@@ -132,6 +144,7 @@
       Authentication used for Oozie HTTP endpoint, the supported values are: simple | kerberos |
       #AUTHENTICATION_HANDLER_CLASSNAME#.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -142,6 +155,7 @@
       This path is added to workflow application if their job properties sets
       the property 'oozie.use.system.libpath' to true.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -153,6 +167,7 @@
       specify where the Pig JAR files are. Instead, the ones from the system
       library path are used.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.authentication.kerberos.name.rules</name>
@@ -164,6 +179,7 @@
       DEFAULT
     </value>
     <description>The mapping from kerberos principal names to local OS user names.</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.service.HadoopAccessorService.hadoop.configurations</name>
@@ -176,6 +192,7 @@
       the Oozie configuration directory; though the path can be absolute (i.e. to point
       to Hadoop client conf/ directories in the local filesystem.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.service.ActionService.executor.ext.classes</name>
@@ -191,6 +208,7 @@
       be used in workflows. This property is a convenience property to add extensions to the built in executors without
       having to include all the built in ones.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -200,6 +218,7 @@
       Schemas for additional actions types. IMPORTANT: if there are no schemas leave a 1 space string, the service
       trims the value, if empty Configuration assumes it is NULL.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.service.JPAService.create.db.schema</name>
@@ -210,6 +229,7 @@
       If set to true, it creates the DB schema if it does not exist. If the DB schema exists is a NOP.
       If set to false, it does not create the DB schema. If the DB schema does not exist it fails start up.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -219,6 +239,7 @@
     <description>
       JDBC driver class.
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -231,6 +252,7 @@
     <description>
       JDBC URL.
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -243,6 +265,7 @@
     <description>
       Database user name to use to connect to the database
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <type>db_user</type>
       <overridable>false</overridable>
@@ -260,6 +283,7 @@
       IMPORTANT: if password is empty leave a 1 space string, the service trims the value,
       if empty Configuration assumes it is NULL.
     </description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -271,6 +295,7 @@
     <description>
       Max number of connections.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -316,6 +341,7 @@
 	   All services to be created and managed by Oozie Services singleton.
       Class names must be separated by commas.
 	</description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.service.URIHandlerService.uri.handlers</name>
@@ -323,6 +349,7 @@
     <description>
       Enlist the different uri handlers supported for data availability checks.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.services.ext</name>
@@ -332,6 +359,7 @@
       To add/replace services defined in 'oozie.services' with custom implementations.
       Class names must be separated by commas.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.service.coord.push.check.requeue.interval</name>
@@ -339,6 +367,7 @@
     <description>
       Command re-queue interval for push dependencies (in millisecond).
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   <property>
     <name>oozie.credentials.credentialclasses</name>
@@ -346,11 +375,13 @@
     <description>
       Credential Class to be used for HCat.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
   
   <property>
     <name>oozie.service.SchemaService.wf.ext.schemas</name>
     <value>shell-action-0.1.xsd,shell-action-0.2.xsd,shell-action-0.3.xsd,email-action-0.1.xsd,email-action-0.2.xsd,hive-action-0.2.xsd,hive-action-0.3.xsd,hive-action-0.4.xsd,hive-action-0.5.xsd,sqoop-action-0.2.xsd,sqoop-action-0.3.xsd,sqoop-action-0.4.xsd,ssh-action-0.1.xsd,ssh-action-0.2.xsd,distcp-action-0.1.xsd,distcp-action-0.2.xsd,oozie-sla-0.1.xsd,oozie-sla-0.2.xsd</value>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -360,6 +391,7 @@
       Specifies whether security (user name/admin role) is enabled or not.
       If disabled any user can manage Oozie system and manage any job.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -368,6 +400,7 @@
     <description>
       Indicates if Oozie is configured to use Kerberos.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -377,6 +410,7 @@
       Indicates if anonymous requests are allowed.
       This setting is meaningful only when using 'simple' authentication.
     </description>
+    <on-ambari-upgrade add="true"/>
   </property>
 
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-env.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-env.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-env.xml
index 47da349..731e4c6 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-env.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-env.xml
@@ -33,6 +33,7 @@ HADOOP_HOME=${HADOOP_HOME:-{{hadoop_home}}}
 #  PIG_OPTS="$PIG_OPTS -Dmapreduce.framework.name=yarn"
 #fi
     </value>
+    <on-ambari-upgrade add="true"/>
   </property>
   
 </configuration>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-log4j.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-log4j.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-log4j.xml
index 040804c..e80327e 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-log4j.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-log4j.xml
@@ -57,6 +57,7 @@ log4j.appender.A=org.apache.log4j.ConsoleAppender
 log4j.appender.A.layout=org.apache.log4j.PatternLayout
 log4j.appender.A.layout.ConversionPattern=%-4r [%t] %-5p %c %x - %m%n
     </value>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <show-property-name>false</show-property-name>
     </value-attributes>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-properties.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-properties.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-properties.xml
index bfd2ab5..eb6eb5a 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-properties.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/configuration/pig-properties.xml
@@ -622,6 +622,7 @@ hcat.bin=/usr/local/hcat/bin/hcat
 
     </value>
     <description>Describe all the Pig agent configurations</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <empty-value-valid>true</empty-value-valid>
       <show-property-name>false</show-property-name>

http://git-wip-us.apache.org/repos/asf/ambari/blob/1d6fcfa1/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/RANGER/configuration/admin-properties.xml
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/RANGER/configuration/admin-properties.xml b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/RANGER/configuration/admin-properties.xml
index 763b370..18fd43b 100755
--- a/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/RANGER/configuration/admin-properties.xml
+++ b/ambari-server/src/main/resources/stacks/BigInsights/4.2/services/RANGER/configuration/admin-properties.xml
@@ -26,6 +26,7 @@
     <value>MYSQL</value>
     <display-name>DB FLAVOR</display-name>
     <description>The database type to be used (mysql/oracle)</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
       <type>value-list</type>
@@ -59,6 +60,7 @@
   <property>
     <name>SQL_COMMAND_INVOKER</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
   -->
   
@@ -67,6 +69,7 @@
     <display-name>Location of Sql Connector Jar</display-name>
     <value>/usr/share/java/mysql-connector-java.jar</value>
     <description>Location of DB client library (please check the location of the jar file)</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -77,6 +80,7 @@
     <value>root</value>
     <display-name>Database Administrator (DBA) username</display-name>
     <description>Database admin user. This user should have DBA permission to create the Ranger Database and Ranger Database User</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -88,6 +92,7 @@
     <value></value>
     <property-type>PASSWORD</property-type>
     <description>Database password for the database admin user-id</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -98,6 +103,7 @@
     <display-name>Ranger DB host</display-name>
     <value></value>
     <description>Database host</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -108,6 +114,7 @@
     <display-name>Ranger DB name</display-name>
     <value>ranger</value>
     <description>Database name</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -118,6 +125,7 @@
     <display-name>Ranger DB username</display-name>
     <value>rangeradmin</value>
     <description>Database username used for the Ranger schema</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -129,6 +137,7 @@
     <value></value>
     <property-type>PASSWORD</property-type>
     <description>Database password for the Ranger schema</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -142,6 +151,7 @@
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -152,6 +162,7 @@
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property require-input="true">
@@ -163,6 +174,7 @@
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
@@ -170,6 +182,7 @@
     <display-name>External URL</display-name>
     <value></value>
     <description>Policy Manager external url eg: http://RANGER_HOST:6080</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -197,6 +210,7 @@
     <display-name>HTTP enabled</display-name>
     <value>true</value>
     <description>HTTP Enabled</description>
+    <on-ambari-upgrade add="true"/>
     <value-attributes>
       <overridable>false</overridable>
     </value-attributes>
@@ -206,56 +220,67 @@
   <property>
     <name>authentication_method</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>remoteLoginEnabled</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>authServiceHostName</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>authServicePort</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_url</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_userDNpattern</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_groupSearchBase</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_groupSearchFilter</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_groupRoleAttribute</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_ad_domain</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
 
   <property>
     <name>xa_ldap_ad_url</name>
     <deleted>true</deleted>
+    <on-ambari-upgrade add="true"/>
   </property>
   -->
   


Mime
View raw message