[
https://issues.apache.org/jira/browse/HADOOP-18864?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
kuper updated HADOOP-18864:
---------------------------
Description:
When there is no configuration of ZooKeeper synchronization for secrets on the
KMS server (hadoop.kms.authentication.signer.secret.provider is null), the YARN
MapReduce job fails to run successfully. The reason is that the KMS returns an
error "invalidToken" as it cannot find the corresponding token in the cache.
!image-2023-08-24-19-53-24-665.png!
Is it possible to achieve fault tolerance by accessing multiple KMS services
without configuring zookeeper for synchronization in KMS?
was:
When there is no configuration of ZooKeeper synchronization for secrets on the
KMS server (hadoop.kms.authentication.signer.secret.provider is null), the YARN
MapReduce job fails to run successfully. The reason is that the KMS returns an
error "invalidToken" as it cannot find the corresponding token in the cache.
!image-2023-08-24-19-53-24-665.png!
> Multiple token access is supported in HA noZK KMS environment
> -------------------------------------------------------------
>
> Key: HADOOP-18864
> URL: https://issues.apache.org/jira/browse/HADOOP-18864
> Project: Hadoop Common
> Issue Type: Improvement
> Components: kms
> Affects Versions: 3.3.6
> Reporter: kuper
> Priority: Minor
> Labels: pull-request-available
> Attachments: image-2023-08-24-19-53-24-665.png
>
>
> When there is no configuration of ZooKeeper synchronization for secrets on
> the KMS server (hadoop.kms.authentication.signer.secret.provider is null),
> the YARN MapReduce job fails to run successfully. The reason is that the KMS
> returns an error "invalidToken" as it cannot find the corresponding token in
> the cache.
> !image-2023-08-24-19-53-24-665.png!
> Is it possible to achieve fault tolerance by accessing multiple KMS services
> without configuring zookeeper for synchronization in KMS?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
