Release 03.11.2021

* Data Proc: added tutorial how to analyze data with Apache Hive, Apache Spark and MapReduce.
* DataLens: added a list of system errors.
* DataLens: added a list of toponyms for geofunctions.
* Managed Service for Apache Kafka®: added instruction how to set up alerts.
* Managed Service for Kubernetes: added solution for synchronization with Yandex Lockbox secrets.
* Managed Service for MySQL: added instruction how to set up alerts.
* Managed Service for MySQL: added tutorial how to migrate database from Managed MySQL to on-premise installation.
* Managed Service for SQL Server: added instruction how to set up alerts.
* Object Storage: added solution for server side encryption.
* Object Storage: updated instruction how to upload an object.
* Translations updated.
* Fixes and improvements.

Author: DataUI VCS Robot

.yfmlint

@@ -0,0 +1,2 @@
+log-levels:
+  YFM001: 'disabled'

en/_assets/full-screen.svg

@@ -0,0 +1,3 @@
+### {{ roles-mdb-admin }} {#mdb-admin}
+
+The role `{{ roles-mdb-admin }}` lets you create and edit clusters of managed databases.

en/_assets/managed-kafka/security/service-roles-hierarchy.svg

@@ -0,0 +1 @@
+[`mdb.admin`](../../../../iam/concepts/access-control/roles.md#mdb-admin): Lets you create and edit clusters of managed databases.

en/_assets/mdb/service-roles-hierarchy.svg

@@ -1,3 +1,3 @@
 * Over the internet, if you configured public access for the appropriate host. You can only connect to these hosts over an SSL connection.
-* From {{ yandex-cloud }} VM instances hosted in the same [virtual network](../../vpc/concepts/network.md). If the host isn't publicly available, you don't need to use an SSL connection to connect to such VMs.
+* From {{ yandex-cloud }} virtual machines located in the same [cloud network](../../vpc/concepts/network.md). If there is no public access to a host, connections from this type of virtual machine don't need to be over SSL.
 

en/_assets/organization/icon-services.png

@@ -156,7 +156,7 @@
   ?>
   ```
 
-  Unlike other connection methods, this code must specify the full path to the `root.crt` certificate for {{ MY }} in the `ssl_set` method.
+  For this connection method, the code must include the full path to the `root.crt` certificate for {{ MY }} in the `ssl_set` method.
 
   **Code example for connecting without SSL:**
 
@@ -194,7 +194,7 @@
      sudo apt update && sudo apt install -y default-jdk maven
      ```
 
-  1. Add the SSL certificate to the Java trusted certificate store (Java Key Store) so that the {{ MY }} driver can use this certificate for secure connections to the cluster hosts. Make sure to set the password using the `-storepass` parameter for additional storage protection:
+  1. Add the SSL certificate to the Java trusted certificate store (Java Key Store) so that the {{ MY }} driver can use this certificate for secure connections to the cluster hosts. Make sure to set the password for storage security using the `-storepass` parameter:
 
      ```bash
      cd ~/.mysql && \
@@ -396,7 +396,7 @@
     })
   ```
 
-  Unlike other connection methods, this code must specify the full path to the `root.crt` certificate for {{ MY }} in the `ca` variable.
+  For this connection method, the code must include the full path to the `root.crt` certificate for {{ MY }} in the `ca` variable.
 
   **Code example for connecting without SSL:**
 
@@ -499,7 +499,7 @@
   }
   ```
 
-  Unlike other connection methods, this code must specify the full path to the `root.crt` certificate for {{ MY }} in the `ca` variable.
+  For this connection method, the code must include the full path to the `root.crt` certificate for {{ MY }} in the `ca` variable.
 
   **Code example for connecting without SSL:**
 
@@ -642,7 +642,7 @@
   SSLVERIFY=1
   ```
 
-  Unlike other connection methods, this file must specify the full path to the `root.crt` certificate for {{ MY }} in the `SSLCA` parameter.
+  For this connection method, the `/etc/odbc.ini` file must include the full path to the `root.crt` certificate for {{ MY }} in the `SSLCA` parameter.
 
   **Example of settings in the `/etc/odbc.ini` file for connecting without SSL:**