[
https://issues.apache.org/jira/browse/YARN-7006?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16127031#comment-16127031
]
Varun Saxena commented on YARN-7006:
------------------------------------
Thanks [~jianhe] for the review.
bq. why is this change required?
This is required because I noticed that we do not pass user from CotainerImpl,
where CONTAINER_INIT Aux services event is generated. Hence the change.
We rely on this user(i.e. AM user) to fill owner of token.
This is not directly related to title of this JIRA and is bug in current code.
As it was only one line change, I included it here instead of raising a new
JIRA.
> [ATSv2 Security] Changes for authentication for CollectorNodemanagerProtocol
> ----------------------------------------------------------------------------
>
> Key: YARN-7006
> URL: https://issues.apache.org/jira/browse/YARN-7006
> Project: Hadoop YARN
> Issue Type: Sub-task
> Components: timelineserver
> Reporter: Varun Saxena
> Assignee: Varun Saxena
> Labels: yarn-5355-merge-blocker
> Attachments: YARN-7006-YARN-5355.01.patch,
> YARN-7006-YARN-5355.02.patch
>
>
> Communication between Collector and NM is via RPC.
> We would do kerberos based authentication for communication between these 2
> components, as of now. Added SecurityInfo implementation for it.
> We can think of adding token based access once collector starts outside of NM.
> Also creation of timeline client within NMTimelinePublisher would be done
> using NM login UGI.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
