-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/54936/
-----------------------------------------------------------
(Updated Dec. 22, 2016, 9:14 a.m.)
Review request for Ambari, Attila Doroszlai, Balázs Bence Sári, Eugene
Chekanskiy, Laszlo Puskas, Robert Levas, and Sebastian Toader.
Changes
-------
replaced python format strings to format('{..}')
Bugs: AMBARI-19269
https://issues.apache.org/jira/browse/AMBARI-19269
Repository: ambari
Description
-------
I modified the kerberization/dekerberization process of YARN RM
based on
https://docs.google.com/document/d/1IEAVBFU2QMhKP5It4_u7L1UtP_QRBTHUk9cOuHjK8AU/
- yarn.resourcemanager.zk-acl is set to sasl:rm:rwcda when kerberos is enabled
(kerberos.json)
- jaas file is added to YARN_OPTS with the correct principal and keytab when
kerberos is enabled
- ACL is reverted to world:anyone:crdwa when disabling kerberos
Diffs (updated)
-----
ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/kerberos.json
4093431
ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/params_linux.py
0496995
ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/resourcemanager.py
6a7eea7
ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/yarn.py
f5acb11
ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/templates/yarn_jaas.conf.j2
PRE-CREATION
ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/kerberos.json
e690204
ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/scripts/params_linux.py
cdadc80
ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/scripts/resourcemanager.py
e053fe6
ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/scripts/yarn.py
70ed5b3
ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/package/templates/yarn_jaas.conf.j2
PRE-CREATION
ambari-server/src/main/resources/stacks/HDP/2.2/services/YARN/kerberos.json
2fdce8a
ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/YARN/kerberos.json
b02b3e9
ambari-server/src/main/resources/stacks/HDP/2.3/services/YARN/kerberos.json
0d67e59
ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json
e690204
Diff: https://reviews.apache.org/r/54936/diff/
Testing
-------
Manual testing:
- created a cluster with YARN + HDFS + ZooKeeper
- enabled kerberos
- check that the acl on /rmstore/ZKRMStateRoot is set to sasl
- disabled kerberos
- checked that the acl on /rmstore/ZKRMStateRoot is 'world,'anyone
- Enabled YARN RM HA mode, repeated the above test
Existing tests are still running..
Thanks,
Attila Magyar
