[
https://issues.apache.org/jira/browse/YARN-8448?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16643719#comment-16643719
]
Haibo Chen commented on YARN-8448:
----------------------------------
Thanks [~rkanter] for the elaboration. OFF is what YARN does as of today and
OPTIONAL essentially allows applications to opt in secure/HTTPS connection
between RM and AM web server. They are straightforward.
IIUC, REQUIRED, without failing AM registration when an AM sends a http
tracking URL, is OPTIONAL + warning/blocking users if the AM&RM connection is
HTTP. As running an application and accessing the running application are
often times done together, it seems less intuitive to me that a user submits an
application that runs fine, but could not access the application while it is
running. If we're concerned about users with older apps that can't be updated
to use HTTPS, IMO the proper solution is to use OPTIONAL as the policy. We
can, when the policy is set of Optional, add an extra warning message (without
blocking access) to the page returned to users.
The way I think of the policy is it tells AMs what RM expects in terms of its
requirement in the RM & AM web server connection (so more of an admin
configuration): OFF means AMs can only choose HTTP connection; OPTIONAL means
AMs can opt in HTTPS connection; REQUIRED means AMs must use HTTPS connection.
From the users' perspective, if an application can run (without failing RM
registration), they can always access the application. They may see a warning
message if the connection is HTTP.
> AM HTTPS Support
> ----------------
>
> Key: YARN-8448
> URL: https://issues.apache.org/jira/browse/YARN-8448
> Project: Hadoop YARN
> Issue Type: Sub-task
> Reporter: Robert Kanter
> Assignee: Robert Kanter
> Priority: Major
> Attachments: YARN-8448.001.patch, YARN-8448.002.patch,
> YARN-8448.003.patch, YARN-8448.004.patch, YARN-8448.005.patch,
> YARN-8448.006.patch
>
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
