hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rohith (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-2973) Capacity scheduler configuration ACLs not work.
Date Wed, 17 Dec 2014 03:53:13 GMT

    [ https://issues.apache.org/jira/browse/YARN-2973?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14249430#comment-14249430
] 

Rohith commented on YARN-2973:
------------------------------

Queue configurations works in intersection. If leaf queue does not have access check with
parent. Since parent(root) has all access, you are able to submit job. .

I feel it is problem because in reality, we can not restrict individual users across the child
queue anytime unless parent has single user access.
I am keeping open for more discussion with experts. I am open to be get convinced.

> Capacity scheduler configuration ACLs not work.
> -----------------------------------------------
>
>                 Key: YARN-2973
>                 URL: https://issues.apache.org/jira/browse/YARN-2973
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: capacityscheduler
>    Affects Versions: 2.5.0
>         Environment: ubuntu 12.04, cloudera manager, cdh5.2.1
>            Reporter: Jimmy Song
>            Assignee: Rohith
>              Labels: acl, capacity-scheduler, yarn
>
> I follow this page to configure yarn: http://archive.cloudera.com/cdh5/cdh/5/hadoop/hadoop-yarn/hadoop-yarn-site/CapacityScheduler.html.

> I configured YARN to use capacity scheduler in yarn-site.xml with yarn.resourcemanager.scheduler.class
for org.apache.hadoop.yarn.server.resourcemanager.scheduler.capacity.CapacityScheduler. Then
modified capacity-scheduler.xml,
> ___________________________________________________
> <?xml version="1.0"?>
> <configuration>
>   <property>
>     <name>yarn.scheduler.capacity.root.queues</name>
>     <value>default,extract,report,tool</value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.state</name>
>     <value>RUNNING</value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.default.acl_submit_applications</name>
>     <value>jcsong2, y2 </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.default.acl_administer_queue</name>
>     <value>jcsong2, y2 </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.default.capacity</name>
>     <value>35</value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.extract.acl_submit_applications</name>
>     <value>jcsong2 </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.extract.acl_administer_queue</name>
>     <value>jcsong2 </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.extract.capacity</name>
>     <value>15</value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.report.acl_submit_applications</name>
>     <value>y2 </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.report.acl_administer_queue</name>
>     <value>y2 </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.report.capacity</name>
>     <value>35</value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.tool.acl_submit_applications</name>
>     <value> </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.tool.acl_administer_queue</name>
>     <value> </value>
>   </property>
>   <property>
>     <name>yarn.scheduler.capacity.root.tool.capacity</name>
>     <value>15</value>
>   </property>
> </configuration>
> _______________________________________________
> I have enabled the acl in yarn-site.xml, but the user jcsong2 can submit applications
to every queue. The queue acl does't work! And the queue used capacity more than it was configured!




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message