> For the complete documentation index, see [llms.txt](https://documentation.alluxio.io/ee-ai-en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.alluxio.io/ee-ai-en/administration.md).

# Administration

This section provides a high-level overview of administering an Alluxio cluster, covering key areas from day-to-day management and monitoring to security and troubleshooting.

## 1. Managing the Cluster

Cluster administration is split across several focused pages. Use the table below to find the right page for the task at hand.

| Question / Task                                                           | Page                                                                                                                                                 |
| ------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
| Harden a basic install for production (node pinning, HA, resource tuning) | [Cluster Management — Production Setup](https://documentation.alluxio.io/ee-ai-en/pages/Zi86aQPzWMrc2orY9tBY#id-1.-production-setup)                 |
| Scale the cluster up or down                                              | [Cluster Management — Scaling](/ee-ai-en/administration/managing-alluxio.md#scaling-the-cluster)                                                     |
| Upgrade Alluxio to a new version                                          | [Cluster Management — Upgrading](/ee-ai-en/administration/managing-alluxio.md#upgrading-alluxio)                                                     |
| Change a property on a running cluster                                    | [Cluster Management — Dynamic Configuration](/ee-ai-en/administration/managing-alluxio.md#dynamically-updating-configuration)                        |
| Tune the consistent hash ring (mode, virtual nodes, capacity)             | [Hash Ring and Worker Lifecycle — Configuration](https://documentation.alluxio.io/ee-ai-en/pages/paqXm2SRU7Uo5W1x23MT#id-2.-hash-ring-configuration) |
| Diagnose stale `OFFLINE` workers / hash ring bloat                        | [Hash Ring — Diagnosing Hash Ring Bloat](/ee-ai-en/administration/managing-ring.md#diagnosing-hash-ring-bloat-from-offline-entries)                  |
| Add, remove, restart, or persist identity for a worker                    | [Hash Ring — Worker Lifecycle on the Ring](https://documentation.alluxio.io/ee-ai-en/pages/paqXm2SRU7Uo5W1x23MT#id-3.-worker-lifecycle-on-the-ring)  |
| Configure worker page store (hostPath / PVC, sizing, multi-disk)          | [Worker Configuration — Worker Storage](https://documentation.alluxio.io/ee-ai-en/pages/MF8PfNU0P7q8PD9eh6xW#id-1.-worker-storage)                   |
| Set up heterogeneous workers                                              | [Worker Configuration — Heterogeneous Workers](/ee-ai-en/administration/managing-worker.md#heterogeneous-workers)                                    |
| Tune worker resources / JVM, diagnose OOM                                 | [Worker Configuration — Resource and JVM Tuning](https://documentation.alluxio.io/ee-ai-en/pages/MF8PfNU0P7q8PD9eh6xW#id-2.-resource-and-jvm-tuning) |
| Bind a worker to a specific NIC                                           | [Worker Configuration — Network](https://documentation.alluxio.io/ee-ai-en/pages/MF8PfNU0P7q8PD9eh6xW#id-3.-worker-network-configuration)            |
| Recover cache coverage after a worker crash or restart                    | [Hash Ring — Cache Recovery After Worker Restart](/ee-ai-en/administration/managing-ring.md#cache-recovery-after-worker-restart)                     |
| Rebalance cached data after adding workers                                | [Cluster Management — Scale Up Step 4](/ee-ai-en/administration/managing-alluxio.md#option-b-job-rebalance-active-redistribution)                    |
| Job submission, scheduling, lifecycle, HA, recovery                       | [Job Service](/ee-ai-en/administration/managing-job-service.md)                                                                                      |
| Tune load throughput for small files or large directories                 | [Job Service — Small File Optimization](/ee-ai-en/administration/managing-job-service.md#small-file-optimization)                                    |
| Multi-tenancy isolation and cluster federation                            | [Cluster Management — Multi-Tenancy](https://documentation.alluxio.io/ee-ai-en/pages/Zi86aQPzWMrc2orY9tBY#id-3.-multi-tenancy-and-federation)        |

## 2. Monitoring and Observability

Alluxio exposes extensive metrics in the Prometheus format, enabling deep visibility into the cluster's health and performance.

* **Default Monitoring Stack**: The Alluxio Operator can automatically deploy a complete monitoring stack, including Prometheus for metrics collection and Grafana for visualization with pre-configured dashboards.
* **Integration with Existing Systems**: You can easily integrate Alluxio with your existing monitoring infrastructure, whether it's a central Prometheus, Grafana, or a third-party service like Datadog.

Learn more about [Monitoring Alluxio](/ee-ai-en/administration/monitoring-alluxio.md)...

## 3. Security

Alluxio provides a multi-layered security model to protect your data and infrastructure.

* **Authentication**: Secure your cluster by integrating with an OIDC-compliant Identity Provider (like Okta) to authenticate users and services using JSON Web Tokens (JWTs).
* **Authorization**: Enforce fine-grained access control. Use **Apache Ranger** for data access policies (S3, HDFS) and **Open Policy Agent (OPA)** for management API policies (Gateway).
* **Encryption**: Protect data in transit by enabling TLS to encrypt communication between Alluxio components and between clients and the cluster.

Learn more about [Security](/ee-ai-en/administration/security.md)...

## 4. Audit and Access Logs

Alluxio records cluster activity through two complementary log streams that support security auditing, compliance, and cache observability.

* **Audit Log**: structured JSON records of management operations (Gateway) and data access (S3, HDFS, FUSE, Python SDK) for compliance and forensics.
* **Access Log**: deduplicated lifecycle events from Worker caches (`LOAD`, `HOT_READ`, `COLD_READ`, `EVICT`, `DELETE`) for governance and cache analysis.

Learn more about [Audit and Access Logs](/ee-ai-en/administration/audit-access-logs.md)...

## 5. Troubleshooting

When issues arise, Alluxio provides tools and procedures to help you diagnose and resolve them quickly.

* **Health Checks**: Start by checking the status of Alluxio components (Coordinators, Workers, FUSE) and verifying connectivity to the UFS.
* **Diagnostics**: Inspect logs from Alluxio processes and Kubernetes CSI drivers. For complex issues, generate a comprehensive diagnostic snapshot that bundles logs, configurations, and metrics for offline analysis.
* **Recovery**: Follow guided procedures to recover from common failures, such as a failed coordinator, worker, or a corrupted etcd cluster.

Learn more about [Troubleshooting Alluxio](/ee-ai-en/administration/troubleshooting-alluxio.md)...