[
https://issues.apache.org/jira/browse/YUNIKORN-1214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17541913#comment-17541913
]
ted edited comment on YUNIKORN-1214 at 5/25/22 9:07 AM:
--------------------------------------------------------
Hi [~mitdesai],
I read the
[doc|https://yunikorn.apache.org/docs/user_guide/usergroup_resolution/]. There
is this paragraph
> Assumption: Yunikorn assumes that all pods belonging to an application are
> owned by the same user. We recommend that the user label is added to every
> pod of an app. This is to ensure that there is no discrepency.
So yunikorn should not currently check the user of each pod in the same app.
was (Author: steinsgateted):
Hi [~mitdesai],
I read the
[doc|https://yunikorn.apache.org/docs/user_guide/usergroup_resolution/]. There
is this paragraph
{{> }}Assumption: Yunikorn assumes that all pods belonging to an application
are owned by the same user. We recommend that the user label is added to every
pod of an app. This is to ensure that there is no discrepency.
So yunikorn should not currently check the user of each pod in the same app.
> Yunikorn does not honor queue acls when adding tasks to existing application
> ----------------------------------------------------------------------------
>
> Key: YUNIKORN-1214
> URL: https://issues.apache.org/jira/browse/YUNIKORN-1214
> Project: Apache YuniKorn
> Issue Type: Bug
> Reporter: Mit Desai
> Priority: Major
>
> Currently when a pod is submitted without an application id, yunikorn
> generates an application id using the namespace where the pod is submitted
> with this format. 'yunikorn-<namespace>-autogen'
> When another pod without an application id is submitted to the same
> namespace, there already exist an application with the name generated name.
> So the next one gets added as a task to the existing application. I see that
> the queue acls are also not taken into consideration when this happens and
> the new pod also becomes the part of the same queue as before.
> For Example:
> 1. Pod submitted to namespace 'a' with get an application id
> yunikorn-a-autogen and based on the acls, lets assume it lands in queue
> 'queue-a'
> 2. If another pod (which does not have an app id) is submitted in the same
> namespace 'a' by a test user who is not authorized to run apps in queue
> 'queue-a', it will be grouped with the the previous application and will
> start running in the same queue.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@yunikorn.apache.org
For additional commands, e-mail: issues-h...@yunikorn.apache.org
