[ 
https://issues.apache.org/jira/browse/YARN-11923?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18054818#comment-18054818
 ] 

ASF GitHub Bot commented on YARN-11923:
---------------------------------------

susheelgupta7 commented on PR #8206:
URL: https://github.com/apache/hadoop/pull/8206#issuecomment-3810729471

   @slfan1989 Could you help me with this infra issue ??
   https://ci-hadoop.apache.org/job/hadoop-multibranch/job/PR-8206/5/
   ```
   ERROR: Checkout failed
   Also:   hudson.remoting.Channel$CallSiteStackTrace: Remote call to hadoop16
                at 
hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1923)
                at 
hudson.remoting.UserRequest$ExceptionResponse.retrieve(UserRequest.java:384)
                at hudson.remoting.Channel.call(Channel.java:1112)
                at hudson.FilePath.act(FilePath.java:1228)
                at hudson.FilePath.act(FilePath.java:1217)
                at hudson.FilePath.mkdirs(FilePath.java:1408)
                at PluginClassLoader for 
git//hudson.plugins.git.GitSCM.createClient(GitSCM.java:843)
                at PluginClassLoader for 
git//hudson.plugins.git.GitSCM._checkout(GitSCM.java:1299)
                at PluginClassLoader for 
git//hudson.plugins.git.GitSCM.checkout(GitSCM.java:1277)
                at PluginClassLoader for 
workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:136)
                at PluginClassLoader for 
workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:101)
                at PluginClassLoader for 
workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep$StepExecutionImpl.run(SCMStep.java:88)
                at PluginClassLoader for 
workflow-step-api//org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47)
                at 
java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:539)
                at 
java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
                at 
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
                at 
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
                at java.base/java.lang.Thread.run(Thread.java:840)
   ```




> YARN web proxy AmIpFilter allows TRACE, bypassing sparkUI TRACE block
> ---------------------------------------------------------------------
>
>                 Key: YARN-11923
>                 URL: https://issues.apache.org/jira/browse/YARN-11923
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: yarn
>            Reporter: Susheel Gupta
>            Assignee: Susheel Gupta
>            Priority: Major
>              Labels: pull-request-available
>
> In yarn mode, sparkUI responds to http TRACE with 302 redirect. The redirect 
> happens in AmIpFilter, so the TRACE request is getting processed before spark 
> jetty handler can reject it. This causes security scanners to report TRACE 
> enabled.
> In local mode there is no yarn proxy filter, so requests go directly to spark 
> Jetty servlet. SPARK‑5983 adds TRACE filter correctly returning 405.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to