hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Billie Rinaldi (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-7605) Implement doAs for Api Service REST API
Date Tue, 23 Jan 2018 19:01:00 GMT

    [ https://issues.apache.org/jira/browse/YARN-7605?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16336248#comment-16336248

Billie Rinaldi commented on YARN-7605:

[~eyang] [~jianhe] I have done some testing of patch 019 and have not encountered any issues.
I plan to commit this patch, but I am going to remove the changes to QuickStart.md because
I don't think these are accurate. (Specifically, yarn.webapp.api-service.enable does still
need to be set and Hadoop does not use StaticUserWebFilter by default.) We can open another
ticket for writing additional documentation, if necessary.

> Implement doAs for Api Service REST API
> ---------------------------------------
>                 Key: YARN-7605
>                 URL: https://issues.apache.org/jira/browse/YARN-7605
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Eric Yang
>            Assignee: Eric Yang
>            Priority: Major
>             Fix For: yarn-native-services
>         Attachments: YARN-7605.001.patch, YARN-7605.004.patch, YARN-7605.005.patch, YARN-7605.006.patch,
YARN-7605.007.patch, YARN-7605.008.patch, YARN-7605.009.patch, YARN-7605.010.patch, YARN-7605.011.patch,
YARN-7605.012.patch, YARN-7605.013.patch, YARN-7605.014.patch, YARN-7605.015.patch, YARN-7605.016.patch,
YARN-7605.017.patch, YARN-7605.018.patch, YARN-7605.019.patch
> In YARN-7540, all client entry points for API service is centralized to use REST API
instead of having direct file system and resource manager rpc calls.  This change helped to
centralize yarn metadata to be owned by yarn user instead of crawling through every user's
home directory to find metadata.  The next step is to make sure "doAs" calls work properly
for API Service.  The metadata is stored by YARN user, but the actual workload still need
to be performed as end users, hence API service must authenticate end user kerberos credential,
and perform doAs call when requesting containers via ServiceClient.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org

View raw message