hadoop-yarn-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eric Yang (JIRA)" <j...@apache.org>
Subject [jira] [Created] (YARN-7605) Implement doAs for Api Service REST API
Date Mon, 04 Dec 2017 17:21:00 GMT
Eric Yang created YARN-7605:

             Summary: Implement doAs for Api Service REST API
                 Key: YARN-7605
                 URL: https://issues.apache.org/jira/browse/YARN-7605
             Project: Hadoop YARN
          Issue Type: Sub-task
            Reporter: Eric Yang

In YARN-7540, all client entry points for API service is centralized to use REST API instead
of having direct file system and resource manager rpc calls.  This change helped to centralize
yarn metadata to be owned by yarn user instead of crawling through every user's home directory
to find metadata.  The next step is to make sure "doAs" calls work properly for API Service.
 The metadata is stored by YARN user, but the actual workload still need to be performed as
end users, hence API service must authenticate end user kerberos credential, and perform doAs
call when requesting containers by Application Manager.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: yarn-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-dev-help@hadoop.apache.org

View raw message