[ 
https://issues.apache.org/jira/browse/YARN-2704?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jian He updated YARN-2704:
--------------------------
    Attachment: YARN-2704.1.patch

uploaded a patch
- make RM automatically request hdfs delegation token on behalf of the user if 
1) user doesn’t provide delegation token on app submission; Or 2) the hdfs 
delegation token is about to expire in 10 hours. 
- NMs heartBeat with RM to get the new tokens and use that for localization and 
log-aggregation
-  a config is added to disable/enable this feature.
- This approach also requires namenode to config RM as the proxy user

>  Localization and log-aggregation will fail if hdfs delegation token expired 
> after token-max-life-time
> ------------------------------------------------------------------------------------------------------
>
>                 Key: YARN-2704
>                 URL: https://issues.apache.org/jira/browse/YARN-2704
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Jian He
>            Assignee: Jian He
>         Attachments: YARN-2704.1.patch
>
>
> In secure mode, YARN requires the hdfs-delegation token to do localization 
> and log aggregation on behalf of the user. But the hdfs delegation token will 
> eventually expire after max-token-life-time.  So,  localization and log 
> aggregation will fail after the token expires.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to