Tarun Parimi created YARN-9701:
----------------------------------
Summary: Yarn service cli commands do not connect to ssl enabled
RM using ssl-client.xml configs
Key: YARN-9701
URL: https://issues.apache.org/jira/browse/YARN-9701
Project: Hadoop YARN
Issue Type: Bug
Components: yarn-native-services
Affects Versions: 3.1.0
Reporter: Tarun Parimi
Assignee: Tarun Parimi
Yarn service commands use the yarn service rest api. When ssl is enabled for
RM, the yarn service commands fail as they don't read the ssl-client.xml
configs to create ssl connection to the rest api.
This becomes a problem especially for self signed certificates as the
truststore location specified at ssl.client.truststore.location is not
considered by commands.
As workaround, we need to import the certificates to the java default cacert
for the yarn service commands to work via ssl. It would be more proper if the
yarn service commands makes use of the configs at ssl-client.xml instead to
configure and create an ssl client connection.
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
