[
https://issues.apache.org/jira/browse/YARN-9633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16868930#comment-16868930
]
Eric Yang commented on YARN-9633:
---------------------------------
[~magnum] Thank you for the patch. However, this feature is already supported,
there is no need to duplicate web impersonation logic in YARN service api. In
core-site.xml, set:
{code}
<property>
<name>hadoop.http.filter.initializers</name>
<value>org.apache.hadoop.security.authentication.server.ProxyUserAuthenticationFilterInitializer,org.apache.hadoop.security.HttpCrossOriginFilterInitializer</value>
</property>
{code}
This will enable web impersonation globally to all web end points.
> Support doas parameter at rest api of yarn-service
> --------------------------------------------------
>
> Key: YARN-9633
> URL: https://issues.apache.org/jira/browse/YARN-9633
> Project: Hadoop YARN
> Issue Type: Improvement
> Components: yarn-native-services
> Affects Versions: 3.1.2
> Reporter: KWON BYUNGCHANG
> Priority: Major
> Attachments: YARN-9633.001.patch
>
>
> user can submit application of yarn-service with a more user-friendly web-ui
> than RM UI2
> web-ui need proxy user privileges and the web-ui must be able to submit jobs
> as an end user.
> REST API of yarn-service need to doas function.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
