hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-15642) Update to latest/recent version of aws-sdk
Date Mon, 30 Jul 2018 21:14:00 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-15642?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16562514#comment-16562514
] 

Steve Loughran commented on HADOOP-15642:
-----------------------------------------

Attached: new GUI to increase max duration of a role. This needs to be done by admins; you
can't take an existing role and ask for a duration > 1h without that update.

> Update to latest/recent version of aws-sdk
> ------------------------------------------
>
>                 Key: HADOOP-15642
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15642
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: build, fs/s3
>    Affects Versions: 3.2.0
>            Reporter: Steve Loughran
>            Priority: Blocker
>         Attachments: Screen Shot 2018-07-30 at 14.11.22.png
>
>
> Move to a later version of the AWS SDK library for a different set of features and issues.
> One thing which doesn't work on the one we ship with is the ability to create assumed
role sessions >1h, as there's a check in the client lib for role-duration <= 3600 seconds.
I'll assume more recent SDKs delegate duration checks to the far end.
> see: [https://aws.amazon.com/about-aws/whats-new/2018/03/longer-role-sessions/]
> * assuming later versions will extend assumed role life, docs will need changing, 
> * Adding a test in HADOOP-15583 which expects an error message if you ask for a duration
of 3h; this should act as the test to see what happens.
> * think this time would be good to explicitly write down the SDK update process



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message