Repository: zeppelin
Updated Branches:
refs/heads/branch-0.6 df0371c02 -> c98ed0b15
ZEPPELIN-1242. Should set property SPARK_YARN_MODE and do login before creating
any spark stuff
### What is this PR for?
We run zeppelin on spark when spark authentication is turned on, but got the
following exception
```
INFO [2016-07-28 00:35:32,845] ({pool-2-thread-2} Logging.scala[logInfo]:58) -
Changing view acls to: zeppelin
INFO [2016-07-28 00:35:32,846] ({pool-2-thread-2} Logging.scala[logInfo]:58) -
Changing modify acls to: zeppelin
INFO [2016-07-28 00:35:32,908] ({pool-1-thread-3} Logging.scala[logInfo]:58) -
Changing view acls to: zeppelin
INFO [2016-07-28 00:35:32,908] ({pool-1-thread-3} Logging.scala[logInfo]:58) -
Changing modify acls to: zeppelin
ERROR [2016-07-28 00:35:32,909] ({pool-2-thread-2} Job.java[run]:189) - Job
failed
java.lang.IllegalArgumentException: Error: a secret key must be specified via
the spark.authenticate.secret config
at
org.apache.spark.SecurityManager.generateSecretKey(SecurityManager.scala:397)
at org.apache.spark.SecurityManager.<init>(SecurityManager.scala:219)
at org.apache.spark.repl.SparkIMain.<init>(SparkIMain.scala:118)
at
org.apache.spark.repl.SparkILoop$SparkILoopInterpreter.<init>(SparkILoop.scala:187)
at
org.apache.spark.repl.SparkILoop.createInterpreter(SparkILoop.scala:217)
at
org.apache.zeppelin.spark.SparkInterpreter.open(SparkInterpreter.java:566)
at
org.apache.zeppelin.interpreter.LazyOpenInterpreter.open(LazyOpenInterpreter.java:69)
at
org.apache.zeppelin.interpreter.LazyOpenInterpreter.interpret(LazyOpenInterpreter.java:93)
at
org.apache.zeppelin.interpreter.remote.RemoteInterpreterServer$InterpretJob.jobRun(RemoteInterpreterServer.java:341)
at org.apache.zeppelin.scheduler.Job.run(Job.java:176)
at
org.apache.zeppelin.scheduler.FIFOScheduler$1.run(FIFOScheduler.java:139)
at
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
ERROR [2016-07-28 00:35:32,918] ({pool-1-thread-3}
TThreadPoolServer.java[run]:296) - Error occurred during processing of message.
java.lang.IllegalArgumentException: Error: a secret key must be specified via
the spark.authenticate.secret config
at
org.apache.spark.SecurityManager.generateSecretKey(SecurityManager.scala:397)
at org.apache.spark.SecurityManager.<init>(SecurityManager.scala:219)
at org.apache.spark.repl.SparkIMain.<init>(SparkIMain.scala:118)
at
org.apache.spark.repl.SparkILoop$SparkILoopInterpreter.<init>(SparkILoop.scala:187)
at
org.apache.spark.repl.SparkILoop.createInterpreter(SparkILoop.scala:217)
at
org.apache.zeppelin.spark.SparkInterpreter.open(SparkInterpreter.java:566)
at
org.apache.zeppelin.interpreter.LazyOpenInterpreter.open(LazyOpenInterpreter.java:69)
at
org.apache.zeppelin.interpreter.LazyOpenInterpreter.getProgress(LazyOpenInterpreter.java:110)
at
org.apache.zeppelin.interpreter.remote.RemoteInterpreterServer.getProgress(RemoteInterpreterServer.java:404)
at
org.apache.zeppelin.interpreter.thrift.RemoteInterpreterService$Processor$getProgress.getResult(RemoteInterpreterService.java:1509)
at
org.apache.zeppelin.interpreter.thrift.RemoteInterpreterService$Processor$getProgress.getResult(RemoteInterpreterService.java:1494)
at org.apache.thrift.ProcessFunction.process(ProcessFunction.java:39)
at org.apache.thrift.TBaseProcessor.process(TBaseProcessor.java:39)
at
org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:285)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
```
The root cause is that we didn't set property SPARK_YARN_MODE just like
spark-shell did.
The following code in Main.scala is what we miss in zeppelin spark interpreter.
https://github.com/apache/spark/blob/branch-1.6/repl/scala-2.11/src/main/scala/org/apache/spark/repl/Main.scala
```
def main(args: Array[String]) {
if (getMaster == "yarn-client") System.setProperty("SPARK_YARN_MODE",
"true")
```
Besides that, we need to do login before creating any spark stuff, otherwise
will hit the classnotfound issue
http://mail-archives.apache.org/mod_mbox/zeppelin-users/201606.mbox/%3CCAH-=KK2SzsXX5zvfnuoLbB1753Tm196_bcB83NzzooedSbLpRQmail.gmail.com%3E.
The cause is that SecurityManager will add secretkey to credential, so before
that we should do login, otherwise Executor can not connect to HttpFileServer
on driver correctly due to the missing of secretkey.
### What type of PR is it?
[Bug Fix]
### What is the Jira issue?
* https://issues.apache.org/jira/browse/ZEPPELIN-1215
### How should this be tested?
Test it on secured cluster manually.
### Questions:
* Does the licenses files need update? No
* Is there breaking changes for older versions? No
* Does this needs documentation? No
Author: Jeff Zhang <[email protected]>
Closes #1237 from zjffdu/ZEPPELIN-1242 and squashes the following commits:
de7c529 [Jeff Zhang] ZEPPELIN-1242. Should set property SPARK_YARN_MODE and do
login before creating any spark stuff
(cherry picked from commit 83e7da7aa6d19bd8489e2af470d9856ebc270524)
Signed-off-by: Mina Lee <[email protected]>
Project: http://git-wip-us.apache.org/repos/asf/zeppelin/repo
Commit: http://git-wip-us.apache.org/repos/asf/zeppelin/commit/c98ed0b1
Tree: http://git-wip-us.apache.org/repos/asf/zeppelin/tree/c98ed0b1
Diff: http://git-wip-us.apache.org/repos/asf/zeppelin/diff/c98ed0b1
Branch: refs/heads/branch-0.6
Commit: c98ed0b15dfabdf9b00a6c1772c4b6ece41698b6
Parents: df0371c
Author: Jeff Zhang <[email protected]>
Authored: Thu Jul 28 14:13:42 2016 +0800
Committer: Mina Lee <[email protected]>
Committed: Mon Aug 1 10:27:18 2016 +0900
----------------------------------------------------------------------
.../apache/zeppelin/spark/SparkInterpreter.java | 17 +++++++++++++++++
1 file changed, 17 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/zeppelin/blob/c98ed0b1/spark/src/main/java/org/apache/zeppelin/spark/SparkInterpreter.java
----------------------------------------------------------------------
diff --git
a/spark/src/main/java/org/apache/zeppelin/spark/SparkInterpreter.java
b/spark/src/main/java/org/apache/zeppelin/spark/SparkInterpreter.java
index d12496f..39d62e3 100644
--- a/spark/src/main/java/org/apache/zeppelin/spark/SparkInterpreter.java
+++ b/spark/src/main/java/org/apache/zeppelin/spark/SparkInterpreter.java
@@ -18,6 +18,7 @@
package org.apache.zeppelin.spark;
import java.io.File;
+import java.io.IOException;
import java.io.PrintWriter;
import java.lang.reflect.Constructor;
import java.lang.reflect.Field;
@@ -32,6 +33,7 @@ import java.util.concurrent.atomic.AtomicInteger;
import com.google.common.base.Joiner;
+import org.apache.hadoop.security.UserGroupInformation;
import org.apache.spark.SparkConf;
import org.apache.spark.SparkContext;
import org.apache.spark.SparkEnv;
@@ -522,6 +524,21 @@ public class SparkInterpreter extends Interpreter {
@Override
public void open() {
+ // set properties and do login before creating any spark stuff for secured
cluster
+ if (getProperty("master").equals("yarn-client")) {
+ System.setProperty("SPARK_YARN_MODE", "true");
+ }
+ if (getProperty().contains("spark.yarn.keytab") &&
+ getProperty().contains("spark.yarn.principal")) {
+ try {
+ String keytab = getProperty().getProperty("spark.yarn.keytab");
+ String principal = getProperty().getProperty("spark.yarn.principal");
+ UserGroupInformation.loginUserFromKeytab(principal, keytab);
+ } catch (IOException e) {
+ throw new RuntimeException("Can not pass kerberos authentication", e);
+ }
+ }
+
conf = new SparkConf();
URL[] urls = getClassloaderUrls();
