hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Haibo Chen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-8448) AM HTTPS Support
Date Tue, 09 Oct 2018 16:45:00 GMT

    [ https://issues.apache.org/jira/browse/YARN-8448?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16643719#comment-16643719

Haibo Chen commented on YARN-8448:

Thanks [~rkanter] for the elaboration. OFF is what YARN does as of today and OPTIONAL essentially
allows applications to opt in secure/HTTPS connection between RM and AM web server. They are

IIUC, REQUIRED, without failing AM registration when an AM sends a http tracking URL, is OPTIONAL
+ warning/blocking users if the AM&RM connection is HTTP.  As running an application
and accessing the running application are often times done together, it seems less intuitive
to me that a user submits an application that runs fine, but could not access the application
while it is running.  If we're concerned about users with older apps that can't be updated
to use HTTPS,  IMO the proper solution is to use OPTIONAL as the policy. We can, when the
policy is set of Optional, add an extra warning message (without blocking access) to the page
returned to users.

The way I think of the policy is it tells AMs what RM expects in terms of its requirement
in the RM & AM web server connection (so more of an admin configuration): OFF means AMs
can only choose HTTP connection; OPTIONAL means AMs can opt in HTTPS connection; REQUIRED
means AMs must use HTTPS connection.  From the users' perspective, if an application can
run (without failing RM registration), they can always access the application. They may see
a warning message if the connection is HTTP.

> AM HTTPS Support
> ----------------
>                 Key: YARN-8448
>                 URL: https://issues.apache.org/jira/browse/YARN-8448
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Robert Kanter
>            Assignee: Robert Kanter
>            Priority: Major
>         Attachments: YARN-8448.001.patch, YARN-8448.002.patch, YARN-8448.003.patch, YARN-8448.004.patch,
YARN-8448.005.patch, YARN-8448.006.patch

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org

View raw message