[
https://issues.apache.org/jira/browse/OOZIE-2797?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andras Salamon updated OOZIE-2797:
----------------------------------
Fix Version/s: (was: trunk)
> Add a framework for cancellation of Delegation Tokens in Oozie AM
> -----------------------------------------------------------------
>
> Key: OOZIE-2797
> URL: https://issues.apache.org/jira/browse/OOZIE-2797
> Project: Oozie
> Issue Type: Bug
> Reporter: Satish Saley
> Assignee: Satish Saley
> Priority: Major
> Attachments: OOZIE-2797-reference.patch
>
>
> Pig and hive clients when run from command line take care of canceling
> HCatalog delegation tokens. But they do not get cancelled when run via Oozie.
> RM only supports cancellation of hdfs and yarn tokens on job completion. So
> when running with Oozie, it is left to the HCatalog server to remove the
> token after the expiry. When there are too many jobs, the number of unexpired
> tokens can overwhelm the hcat server and cause outages. Oozie should take
> care of canceling these tokens after the job is done to avoid that.
> We should add a token cancellation framework in the new Oozie AM to support
> implementations for token cancellation for different credential types similar
> to CredentialsProvider.
> Attaching a reference patch that we used internally for directly canceling
> hcat tokens for just pig and hive actions that could be used by anyone who
> needs it till OOZIE-1770 is done and the new token cancellation framework is
> added by this jira.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
