[
https://issues.apache.org/jira/browse/HADOOP-19181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18056963#comment-18056963
]
ASF GitHub Bot commented on HADOOP-19181:
-----------------------------------------
steveloughran opened a new pull request, #8234:
URL: https://github.com/apache/hadoop/pull/8234
Hard-code a 15 minute advance time for credential renewal, so even if a
large number of processes simultaneously trying to renew their tokens through
IAM requests may trigger throttling, the asynchronous refresh thread has
minutes of backoff and retry before the existing credentials become invalid.
+ Add a test case to explicitly instantiate the class and ask for
credentials doesn't care about whether credentials are returned (EC2 runs) or
if NoAwsCredentialsException is returned -any other exception is raised as a
failure.
+ Make test suite subclass of HadoopTestBase to avoid instantiating s3a fs.
Contains HADOOP-19748: S3A: ITestAssumeRole tests failing now STS returns
detailed
error messages
(This is a backport which I thought I'd already applied; will merge once
yetus is happy)
### How was this patch tested?
s3 london; fixes all the assume role test failures
### For code changes:
- [X] Does the title or this PR starts with the corresponding JIRA issue id
(e.g. 'HADOOP-17799. Your PR title ...')?
- [X] Object storage: have the integration tests been executed and the
endpoint declared according to the connector-specific documentation?
- [ ] If adding new dependencies to the code, are these dependencies
licensed in a way that is compatible for inclusion under [ASF
2.0](http://www.apache.org/legal/resolved.html#category-a)?
- [ ] If applicable, have you updated the `LICENSE`, `LICENSE-binary`,
`NOTICE-binary` files?
### AI Tooling
If an AI tool was used:
- [ ] The PR includes the phrase "Contains content generated by <tool>"
where <tool> is the name of the AI tool used.
- [ ] My use of AI contributions follows the ASF legal policy
https://www.apache.org/legal/generative-tooling.html
> S3A: IAMCredentialsProvider throttling results in AWS auth failures
> -------------------------------------------------------------------
>
> Key: HADOOP-19181
> URL: https://issues.apache.org/jira/browse/HADOOP-19181
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: fs/s3
> Affects Versions: 3.4.0
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Priority: Blocker
> Labels: pull-request-available
> Fix For: 3.4.3
>
>
> Tests report throttling errors in IAM being remapped to noauth and failure
> Again, impala tests, but with multiple processes on same host. this means
> that HADOOP-18945 isn't sufficient as even if it ensures a singleton instance
> for a process
> * it doesn't if there are many test buckets (fixable)
> * it doesn't work across processes (not fixable)
> we may be able to
> * use a singleton across all filesystem instances
> * once we know how throttling is reported, handle it through retries +
> error/stats collection
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
