Steve Loughran created HADOOP-11825:
---------------------------------------
Summary: Move timelineclient Jersey+Kerberos+UGI support into a
public implementation
Key: HADOOP-11825
URL: https://issues.apache.org/jira/browse/HADOOP-11825
Project: Hadoop Common
Issue Type: Improvement
Components: net
Affects Versions: 2.7.0
Reporter: Steve Loughran
Having a SPNEGO authed Jersey REST client is a pre-requisite for REST
operations against YARN applications and any other services in the Hadoop
cluster which use Kerberos to auth, from code that uses UGI to manage identity.
There's a multiple implementations of UGI+Http bindings in the code, with
{{org.apache.hadoop.yarn.client.api.impl.TimelineClientImpl}} being the one
which provides Jersey client integration, and:
# retry
# delegation tokens
# {{doAs()}} support
It does all of this intermixed with the rest of the code, and is tagged as
private.
I propose pulling the jersey support out into a hadoop common .net class,
tagging as public+evolving, to act as the foundation for any app that needs to
use UGI+SPNEGO with jersey
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
