Jian He created YARN-3100:

             Summary: Make YARN authorization pluggable
                 Key: YARN-3100
                 URL: https://issues.apache.org/jira/browse/YARN-3100
             Project: Hadoop YARN
          Issue Type: Bug
            Reporter: Jian He
            Assignee: Jian He

The goal is to have YARN acl model pluggable so as to integrate other 
authorization tool such as Apache Ranger, Sentry.

Currently, we have 
- admin ACL
- queue ACL
- application ACL
- time line domain ACL
- service ACL

The proposal is to create a YarnAuthorizationProvider interface. Current 
implementation will be the default implementation. Ranger or Sentry plug-in can 
implement  this interface.

-  Unify the code base. With the default implementation, we can get rid of each 
specific ACL manager such as AdminAclManager, ApplicationACLsManager, 
QueueAclsManager etc.
- Enable Ranger, Sentry to do authorization for YARN. 

This message was sent by Atlassian JIRA

Reply via email to