[
https://issues.apache.org/jira/browse/TEZ-3488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15651151#comment-15651151
]
Sreenath Somarajapuram commented on TEZ-3488:
---------------------------------------------
[~hitesh] I'v improved the above documentation. Please review. Working on the
other parts of the doc.
bq. Is there any security aspect raised if we use "*" instead of the origin
host as currently being done?
We cannot use "*" when withCredentials is set to true in the request. As
explained here
https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Requests_with_credentials,
withCredentials is required for making calls that are aware of HTTP cookies
and HTTP Authentication information. It was added as part of TEZ-1799.
[~jeagles] Considering that we are not sending any credentials as of now in the
headers, should we remove the flag for the time being?
> Tez UI Vertex 404
> -----------------
>
> Key: TEZ-3488
> URL: https://issues.apache.org/jira/browse/TEZ-3488
> Project: Apache Tez
> Issue Type: Bug
> Affects Versions: 0.8.4
> Reporter: George Liaw
>
> When we're trying to view vertices for a running job, the Vertex page will
> show a 404 error saying:
> "Could not retrieve expected data from @ <url>"
> And the Vertex Counter page will show:
> "Counters unavailable"
> and
> "Error code: Unknown, message: Resource Manager (RM) out of reach. Either
> it's down or CORS is not enabled"
> The RMs are up and CORS is enabled. If we go to the displayed url, we get the
> expected XML with the application info. When the DAG finishes running, those
> errors go away and the pages display fine. Any idea what's going on here?
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
