[
https://issues.apache.org/jira/browse/YARN-9975?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17401825#comment-17401825
]
Eric Payne commented on YARN-9975:
----------------------------------
[~cane] / [~snemeth], for about a year, we have been running code in production
that I think covers this requirement. I have opened HADOOP-17857 and outlined
what our requirements were, as well as necessary changes to AccessControlList
class. Please let me know if this fulfills your requirements.
We have also been using this in YARN to submit apps as a proxied user but
restricting the CS queue ACLs to the real user. I can submit the patch for the
YARN pieces to YARN-1115 if that would be of interest.
> Support proxy ACL user for CapacityScheduler
> --------------------------------------------
>
> Key: YARN-9975
> URL: https://issues.apache.org/jira/browse/YARN-9975
> Project: Hadoop YARN
> Issue Type: New Feature
> Reporter: zhoukang
> Assignee: zhoukang
> Priority: Major
>
> As commented in YARN-9698.
> I will open a new jira for the proxy user feature.
> The background is that we have long running sql thriftserver for many users:
> {quote}{{user->sql proxy-> sql thriftserver}}{quote}
> But we do not have keytab for all users on 'sql proxy'. We just use a super
> user like 'sql_prc' to submit the 'sql thriftserver' application. To support
> this we should change the scheduler to support proxy user acl
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
