Puviarasu created IGNITE-8890: --------------------------------- Summary: Ignite YARN Kerberos - Delegation Token renewal Key: IGNITE-8890 URL: https://issues.apache.org/jira/browse/IGNITE-8890 Project: Ignite Issue Type: Bug Components: yarn Affects Versions: 2.3 Environment: Kerberos cluster
Ignite Version : 2.3.0 Module : Ignite-YARN Class : ApplicationMaster Reporter: Puviarasu As Ignite-YARN is a long running application in YARN environment it should have a mechanism to renew the delegation token. In Ignite-YARN, when the ApplicationMaster is started, it acquires Delegation tokens and stores in a ByteBuffer[Class: ApplicationMaster, Method: init()]. This ByteBuffer with token information is given to all the containers received from ResourceManager [Class: ApplicationMaster, Method: onContainersAllocated()]. Everything works fine till the life time of the delegation token. Once the delegation token expires, the ApplicationMaster is not able to start Ignite inside containers it receive and below exception occurs WARNING: Error launching container org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.token.SecretManager$InvalidToken): at org.apache.hadoop.ipc.Client.call(Client.java:1504) at org.apache.hadoop.ipc.Client.call(Client.java:1441) at org.apache.hadoop.ipc.ProtobufRpcEngine$Invoker.invoke(ProtobufRpcEngine.java:230) at com.sun.proxy.$Proxy10.getFileInfo(Unknown Source) at org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolTranslatorPB.getFileInfo(ClientNamenodeProtocolTranslatorPB.java:771) at sun.reflect.GeneratedMethodAccessor2.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.apache.hadoop.io.retry.RetryInvocationHandler.invokeMethod(RetryInvocationHandler.java:256) at org.apache.hadoop.io.retry.RetryInvocationHandler.invoke(RetryInvocationHandler.java:104) at com.sun.proxy.$Proxy11.getFileInfo(Unknown Source) at org.apache.hadoop.hdfs.DFSClient.getFileInfo(DFSClient.java:2123) at org.apache.hadoop.hdfs.DistributedFileSystem$20.doCall(DistributedFileSystem.java:1253) at org.apache.hadoop.hdfs.DistributedFileSystem$20.doCall(DistributedFileSystem.java:1249) at org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81) at org.apache.hadoop.hdfs.DistributedFileSystem.getFileStatus(DistributedFileSystem.java:1249) at org.apache.ignite.yarn.utils.IgniteYarnUtils.setupFile(IgniteYarnUtils.java:65) at org.apache.ignite.yarn.ApplicationMaster.onContainersAllocated(ApplicationMaster.java:131) at org.apache.hadoop.yarn.client.api.async.impl.AMRMClientAsyncImpl$CallbackHandlerThread.run(AMRMClientAsyncImpl.java:292) ApplicationMaster keeps on asking for more and more containers [Class: ApplicationMaster, Method: run()] but not able to start Ignite inside any of the containers due to the expired/missing delegation token. This repeats until all the resources in the cluster are allocated to Ignition. Kindly help in resolving the issue. Thanks in Advance!!! -- This message was sent by Atlassian JIRA (v7.6.3#76005)