----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/54936/ -----------------------------------------------------------
Review request for Ambari, Attila Doroszlai, Balázs Bence Sári, Eugene Chekanskiy, Laszlo Puskas, Robert Levas, and Sebastian Toader. Bugs: AMBARI-19269 https://issues.apache.org/jira/browse/AMBARI-19269 Repository: ambari Description ------- I modified the kerberization/dekerberization process of YARN RM based on https://docs.google.com/document/d/1IEAVBFU2QMhKP5It4_u7L1UtP_QRBTHUk9cOuHjK8AU/ - yarn.resourcemanager.zk-acl is set to sasl:rm:rwcda when kerberos is enabled (kerberos.json) - jaas file is added to YARN_OPTS with the correct principal and keytab when kerberos is enabled - ACL is reverted to world:anyone:crdwa when disabling kerberos Diffs ----- ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/kerberos.json 4093431 ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/params_linux.py 0496995 ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/resourcemanager.py 6a7eea7 ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/yarn.py f5acb11 ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/templates/yarn_jaas.conf.j2 PRE-CREATION ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/kerberos.json e690204 ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/scripts/params_linux.py cdadc80 ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/scripts/resourcemanager.py e053fe6 ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/scripts/yarn.py 70ed5b3 ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/templates/yarn_jaas.conf.j2 PRE-CREATION ambari-server/src/main/resources/stacks/HDP/2.2/services/YARN/kerberos.json 2fdce8a ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/YARN/kerberos.json b02b3e9 ambari-server/src/main/resources/stacks/HDP/2.3/services/YARN/kerberos.json 0d67e59 ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json e690204 Diff: https://reviews.apache.org/r/54936/diff/ Testing ------- Manual testing: - created a cluster with YARN + HDFS + ZooKeeper - enabled kerberos - check that the acl on /rmstore/ZKRMStateRoot is set to sasl - disabled kerberos - checked that the acl on /rmstore/ZKRMStateRoot is 'world,'anyone - Enabled YARN RM HA mode, repeated the above test Existing tests are still running.. Thanks, Attila Magyar