[ https://issues.apache.org/jira/browse/YUNIKORN-1214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17541913#comment-17541913 ]
ted commented on YUNIKORN-1214: ------------------------------- Hi [~mitdesai], I read the [doc|https://yunikorn.apache.org/docs/user_guide/usergroup_resolution/]. There is this paragraph > Assumption: Yunikorn assumes that all pods belonging to an application are > owned by the same user. We recommend that the user label is added to every > pod of an app. This is to ensure that there is no discrepency. So yunikorn should not currently check the user of each pod in the same app. > Yunikorn does not honor queue acls when adding tasks to existing application > ---------------------------------------------------------------------------- > > Key: YUNIKORN-1214 > URL: https://issues.apache.org/jira/browse/YUNIKORN-1214 > Project: Apache YuniKorn > Issue Type: Bug > Reporter: Mit Desai > Priority: Major > > Currently when a pod is submitted without an application id, yunikorn > generates an application id using the namespace where the pod is submitted > with this format. 'yunikorn-<namespace>-autogen' > When another pod without an application id is submitted to the same > namespace, there already exist an application with the name generated name. > So the next one gets added as a task to the existing application. I see that > the queue acls are also not taken into consideration when this happens and > the new pod also becomes the part of the same queue as before. > For Example: > 1. Pod submitted to namespace 'a' with get an application id > yunikorn-a-autogen and based on the acls, lets assume it lands in queue > 'queue-a' > 2. If another pod (which does not have an app id) is submitted in the same > namespace 'a' by a test user who is not authorized to run apps in queue > 'queue-a', it will be grouped with the the previous application and will > start running in the same queue. -- This message was sent by Atlassian Jira (v8.20.7#820007) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@yunikorn.apache.org For additional commands, e-mail: issues-h...@yunikorn.apache.org