----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/61734/ -----------------------------------------------------------
Review request for oozie, Peter Cseh, Peter Bacsko, and Robert Kanter. Repository: oozie-git Description ------- In a secure environment, when both HDFS HA and log aggregation are turned on, `JavaActionExecutor` is not able to call `YarnClient#submitApplication` since `HDFS_DELEGATION_TOKEN` is missing. In those cases we need to get `HDFS_DELEGATION_TOKEN` from YARN: * get server principal / YARN renewer via `HadoopAccessorService#getServerPrincipal` * get `HDFS_DELEGATION_TOKEN` via `DFSClient#getDelegationToken` * add `HDFS_DELEGATION_TOKEN` to `Credentials` Diffs ----- core/src/main/java/org/apache/oozie/action/hadoop/JavaActionExecutor.java dc17950418ada9b4848ed5597702a29e7124ab38 core/src/main/java/org/apache/oozie/service/HadoopAccessorService.java b507c79d44aa2095caf532a5f4d19d20c1a30630 Diff: https://reviews.apache.org/r/61734/diff/1/ Testing ------- `TestJavaActionExecutor`, `TestHadoopAccessorService` Thanks, András Piros
