[jira] [Commented] (YARN-7572) Make the service status output more readable

[ https://issues.apache.org/jira/browse/YARN-7572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16353326#comment-16353326 ] Eric Yang commented on YARN-7572: - [~csingh] I think we can also omit null value fields to clean up the

[jira] [Commented] (YARN-7516) Security check for trusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16355874#comment-16355874 ] Eric Yang commented on YARN-7516: - Thank you [~shaneku...@gmail.com] [~ebadger] for the review. Thank you

[jira] [Updated] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7221: Attachment: YARN-7221.004.patch > Add security check for privileged docker container >

[jira] [Commented] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16355883#comment-16355883 ] Eric Yang commented on YARN-7221: - [~ebadger] Patch 004 is rebased to after YARN-7446. You might be

[jira] [Updated] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7446: Attachment: YARN-7446.002.patch > Docker container privileged mode and --user flag contradict each other >

[jira] [Updated] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7221: Attachment: YARN-7221.003.patch > Add security check for privileged docker container >

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16355878#comment-16355878 ] Eric Yang commented on YARN-7446: - - Rebase patch to YARN-7516 commit. [~ebadger] Do you mind to do the

[jira] [Updated] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7221: Attachment: (was: YARN-7221.003.patch) > Add security check for privileged docker container >

[jira] [Assigned] (YARN-7530) hadoop-yarn-services-api should be part of hadoop-yarn-services

[ https://issues.apache.org/jira/browse/YARN-7530?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reassigned YARN-7530: --- Assignee: Chandni Singh (was: Eric Yang) > hadoop-yarn-services-api should be part of

[jira] [Commented] (YARN-7827) Stop and Delete Yarn Service from RM UI fails with HTTP ERROR 404

[ https://issues.apache.org/jira/browse/YARN-7827?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16357608#comment-16357608 ] Eric Yang commented on YARN-7827: - Hi [~sunilg], Thank you for the patch.  Overall, the patch is in the

[jira] [Commented] (YARN-7907) Yarn app CLI client does not send Kerberos header to Resource Manager rest API

[ https://issues.apache.org/jira/browse/YARN-7907?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16357587#comment-16357587 ] Eric Yang commented on YARN-7907: - This problem can happen due to the following reasons: # If user is not

[jira] [Commented] (YARN-7827) Stop and Delete Yarn Service from RM UI fails with HTTP ERROR 404

[ https://issues.apache.org/jira/browse/YARN-7827?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16357619#comment-16357619 ] Eric Yang commented on YARN-7827: - [~sunilg] For supporting knox, it would be good for javascript to detect

[jira] [Resolved] (YARN-7907) Yarn app CLI client does not send Kerberos header to Resource Manager rest API

[ https://issues.apache.org/jira/browse/YARN-7907?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved YARN-7907. - Resolution: Not A Bug Assignee: Eric Yang > Yarn app CLI client does not send Kerberos header to

[jira] [Commented] (YARN-7827) Stop and Delete Yarn Service from RM UI fails with HTTP ERROR 404

[ https://issues.apache.org/jira/browse/YARN-7827?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16356264#comment-16356264 ] Eric Yang commented on YARN-7827: - In kerberos enabled environment, if CORS filter is enabled, we also need

[jira] [Comment Edited] (YARN-7827) Stop and Delete Yarn Service from RM UI fails with HTTP ERROR 404

[ https://issues.apache.org/jira/browse/YARN-7827?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16356264#comment-16356264 ] Eric Yang edited comment on YARN-7827 at 2/8/18 12:08 AM: -- In kerberos enabled

[jira] [Commented] (YARN-7827) Stop and Delete Yarn Service from RM UI fails with HTTP ERROR 404

[ https://issues.apache.org/jira/browse/YARN-7827?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16356244#comment-16356244 ] Eric Yang commented on YARN-7827: - Hi [~sunilg], the comment looks good. Can you also change

[jira] [Updated] (YARN-7909) YARN service REST API returns charset=null when kerberos enabled

[ https://issues.apache.org/jira/browse/YARN-7909?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7909: Attachment: YARN-7909.001.patch > YARN service REST API returns charset=null when kerberos enabled >

[jira] [Created] (YARN-7909) YARN service REST API returns charset=null when kerberos enabled

Eric Yang created YARN-7909: --- Summary: YARN service REST API returns charset=null when kerberos enabled Key: YARN-7909 URL: https://issues.apache.org/jira/browse/YARN-7909 Project: Hadoop YARN

[jira] [Updated] (YARN-7516) Security check for trusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.018.patch > Security check for trusted docker image >

[jira] [Commented] (YARN-7862) YARN native service REST endpoint needs user.name as query param

[ https://issues.apache.org/jira/browse/YARN-7862?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16354276#comment-16354276 ] Eric Yang commented on YARN-7862: - [~sunilg] AuthenticationFilter will issue delegation token if user.name

[jira] [Commented] (YARN-7516) Security check for trusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16354288#comment-16354288 ] Eric Yang commented on YARN-7516: - Rebase code to current trunk. > Security check for trusted docker image

[jira] [Commented] (YARN-7516) Security check for trusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16354681#comment-16354681 ] Eric Yang commented on YARN-7516: - The failed test case (TestContainerManager) is not related to this JIRA,

[jira] [Updated] (YARN-7889) Missing kerberos token when check for RM REST API availability

[ https://issues.apache.org/jira/browse/YARN-7889?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7889: Attachment: YARN-7889.002.patch > Missing kerberos token when check for RM REST API availability >

[jira] [Created] (YARN-7923) Refine proxy user authorization to support multiple ACL list

Eric Yang created YARN-7923: --- Summary: Refine proxy user authorization to support multiple ACL list Key: YARN-7923 URL: https://issues.apache.org/jira/browse/YARN-7923 Project: Hadoop YARN Issue

[jira] [Comment Edited] (YARN-7923) Refine proxy user authorization to support multiple ACL list

[ https://issues.apache.org/jira/browse/YARN-7923?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361554#comment-16361554 ] Eric Yang edited comment on YARN-7923 at 2/12/18 10:44 PM: --- Sorry, filed with

[jira] [Resolved] (YARN-7923) Refine proxy user authorization to support multiple ACL list

[ https://issues.apache.org/jira/browse/YARN-7923?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved YARN-7923. - Resolution: Duplicate Sorry, failed with wrong project. > Refine proxy user authorization to support

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16361464#comment-16361464 ] Eric Yang commented on YARN-7446: - [~ebadger] Thank you for the review.  I will address those concerns, and

[jira] [Commented] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362741#comment-16362741 ] Eric Yang commented on YARN-7221: - [~ebadger] Thank you for the review. Our decision was to run docker as

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362747#comment-16362747 ] Eric Yang commented on YARN-7446: - [~ebadger] uid:gid will only set primary group. {{\-\-group-add}} call

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16362881#comment-16362881 ] Eric Yang commented on YARN-7446: - [~ebadger] I see what you are saying now.  For root, there is no need to

[jira] [Updated] (YARN-7942) Yarn ServiceClient does not not delete znode from secure ZooKeeper

[ https://issues.apache.org/jira/browse/YARN-7942?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7942: Attachment: YARN-7942.001.patch > Yarn ServiceClient does not not delete znode from secure ZooKeeper >

[jira] [Assigned] (YARN-7942) Yarn ServiceClient does not not delete znode from secure ZooKeeper

[ https://issues.apache.org/jira/browse/YARN-7942?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reassigned YARN-7942: --- Assignee: Eric Yang > Yarn ServiceClient does not not delete znode from secure ZooKeeper >

[jira] [Updated] (YARN-7940) Service AM gets NoAuth with secure ZK

[ https://issues.apache.org/jira/browse/YARN-7940?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7940: Fix Version/s: 3.1.0 > Service AM gets NoAuth with secure ZK > - > >

[jira] [Updated] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7221: Target Version/s: (was: 3.1.0) Priority: Major (was: Blocker) > Add security check for

[jira] [Updated] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7446: Target Version/s: (was: 3.1.0) Priority: Major (was: Blocker) > Docker container privileged

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16372112#comment-16372112 ] Eric Yang commented on YARN-7446: - YARN-7654 will change the launcher script invocation to be external of

[jira] [Commented] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16372110#comment-16372110 ] Eric Yang commented on YARN-7221: - YARN-7654 will change the launcher script invocation to be external of

[jira] [Commented] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16372089#comment-16372089 ] Eric Yang commented on YARN-7221: - [~ebadger] Patch 005 will pass string username instead of uid:gid from

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16370264#comment-16370264 ] Eric Yang commented on YARN-7446: - Hi [~ebadger], please check version 3 of the patch. We are closing in

[jira] [Assigned] (YARN-7942) Yarn ServiceClient does not not delete znode from secure ZooKeeper

[ https://issues.apache.org/jira/browse/YARN-7942?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reassigned YARN-7942: --- Assignee: Billie Rinaldi (was: Eric Yang) > Yarn ServiceClient does not not delete znode from secure

[jira] [Updated] (YARN-7909) YARN service REST API returns charset=null when kerberos enabled

[ https://issues.apache.org/jira/browse/YARN-7909?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7909: Fix Version/s: 3.1.0 > YARN service REST API returns charset=null when kerberos enabled >

[jira] [Updated] (YARN-7836) YARN Service component update PUT API should not use component name from JSON body

[ https://issues.apache.org/jira/browse/YARN-7836?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7836: Fix Version/s: 3.1.0 > YARN Service component update PUT API should not use component name from JSON > body

[jira] [Commented] (YARN-7942) Yarn ServiceClient does not not delete znode from secure ZooKeeper

[ https://issues.apache.org/jira/browse/YARN-7942?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16373435#comment-16373435 ] Eric Yang commented on YARN-7942: - +1 Tested the following scenarios: 1. Started YARN without JAAS

[jira] [Commented] (YARN-7836) YARN Service component update PUT API should not use component name from JSON body

[ https://issues.apache.org/jira/browse/YARN-7836?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16373450#comment-16373450 ] Eric Yang commented on YARN-7836: - +1 the patch works as advertised. > YARN Service component update PUT

[jira] [Commented] (YARN-7963) TestServiceAM and TestServiceMonitor test cases are hanging

[ https://issues.apache.org/jira/browse/YARN-7963?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16375691#comment-16375691 ] Eric Yang commented on YARN-7963: - There are new methods introduced in YARN-6619, and causing the unit test

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16375228#comment-16375228 ] Eric Yang commented on YARN-7446: - [~ebadger] Thank you for the review, but I can't move the free to end of

[jira] [Updated] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7446: Attachment: YARN-7446.004.patch > Docker container privileged mode and --user flag contradict each other >

[jira] [Commented] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16366224#comment-16366224 ] Eric Yang commented on YARN-7221: - [~ebadger], I tested with: {code:java} docker run -it --privileged -v

[jira] [Created] (YARN-7942) Yarn ServiceClient does not not delete znode from secure ZooKeeper

Eric Yang created YARN-7942: --- Summary: Yarn ServiceClient does not not delete znode from secure ZooKeeper Key: YARN-7942 URL: https://issues.apache.org/jira/browse/YARN-7942 Project: Hadoop YARN

[jira] [Updated] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7446: Attachment: YARN-7446.003.patch > Docker container privileged mode and --user flag contradict each other >

[jira] [Commented] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16366395#comment-16366395 ] Eric Yang commented on YARN-7221: - [~ebadger] My apologies, I know the current patch isn't working. I will

[jira] [Commented] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16366385#comment-16366385 ] Eric Yang commented on YARN-7446: - - Patch updated for fixing missing free. - Patch updated to drop

[jira] [Created] (YARN-7963) TestServiceAM and TestServiceMonitor test cases are hanging

Eric Yang created YARN-7963: --- Summary: TestServiceAM and TestServiceMonitor test cases are hanging Key: YARN-7963 URL: https://issues.apache.org/jira/browse/YARN-7963 Project: Hadoop YARN Issue

[jira] [Commented] (YARN-7963) TestServiceAM and TestServiceMonitor test cases are hanging

[ https://issues.apache.org/jira/browse/YARN-7963?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16374902#comment-16374902 ] Eric Yang commented on YARN-7963: - The unit test is based on ServiceMaster which extends CompositeService.

[jira] [Updated] (YARN-7963) TestServiceAM and TestServiceMonitor test cases are hanging

[ https://issues.apache.org/jira/browse/YARN-7963?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7963: Description: There is a regression when merge YARN-6592 that prevents YARN services test cases from working.

[jira] [Updated] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7221: Attachment: YARN-7221.005.patch > Add security check for privileged docker container >

[jira] [Updated] (YARN-7942) Yarn ServiceClient does not not delete znode from secure ZooKeeper

[ https://issues.apache.org/jira/browse/YARN-7942?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7942: Priority: Blocker (was: Major) > Yarn ServiceClient does not not delete znode from secure ZooKeeper >

[jira] [Updated] (YARN-7221) Add security check for privileged docker container

[ https://issues.apache.org/jira/browse/YARN-7221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7221: Affects Version/s: 3.1.0 3.0.0 Target Version/s: 3.1.0 Priority:

[jira] [Updated] (YARN-7446) Docker container privileged mode and --user flag contradict each other

[ https://issues.apache.org/jira/browse/YARN-7446?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7446: Target Version/s: 3.1.0 Priority: Blocker (was: Major) > Docker container privileged mode and

[jira] [Comment Edited] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16308357#comment-16308357 ] Eric Yang edited comment on YARN-7677 at 1/2/18 4:54 PM: - [~ebadger] Happy new

[jira] [Commented] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16308357#comment-16308357 ] Eric Yang commented on YARN-7677: - [~ebadger] Happy new year. I think it will be safer for

[jira] [Updated] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7590: Attachment: YARN-7590.006.patch - Updated according to most recent feedback. > Improve container-executor

[jira] [Updated] (YARN-7605) Implement doAs for Api Service REST API

[ https://issues.apache.org/jira/browse/YARN-7605?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7605: Attachment: YARN-7605.007.patch - Fix checkstyle issues. > Implement doAs for Api Service REST API >

[jira] [Resolved] (YARN-7381) Enable the configuration: yarn.nodemanager.log-container-debug-info.enabled by default in yarn-default.xml

[ https://issues.apache.org/jira/browse/YARN-7381?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved YARN-7381. - Resolution: Fixed When NM_LOG_CONTAINER_DEBUG_INFO is enabled, and there is a problem to execute

[jira] [Updated] (YARN-7605) Implement doAs for Api Service REST API

[ https://issues.apache.org/jira/browse/YARN-7605?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7605: Attachment: YARN-7605.009.patch - Fix a bug where pseudo security use doAs=username to allow impersonation.

[jira] [Updated] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7590: Attachment: YARN-7590.005.patch - Added directory permission check before creation of directories. - Reuse

[jira] [Commented] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16301970#comment-16301970 ] Eric Yang commented on YARN-7590: - [~miklos.szeg...@cloudera.com] Thank you for the feedback, and I revised

[jira] [Updated] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7590: Description: There is minimum check for prefix path for container-executor. If YARN is compromised,

[jira] [Updated] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7590: Attachment: YARN-7590.003.patch - Rename uid to caller_uid. - Use global variable for caller_uid to minimize

[jira] [Commented] (YARN-7605) Implement doAs for Api Service REST API

[ https://issues.apache.org/jira/browse/YARN-7605?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16300235#comment-16300235 ] Eric Yang commented on YARN-7605: - Hadoop common unit test failure is tracked in HADOOP-15128, and not

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.003.patch - Fix checkstyle warnings. - Findbug issue is not introduced by this patch.

[jira] [Resolved] (YARN-7656) Can not destroy yarn service application in stopped state

[ https://issues.apache.org/jira/browse/YARN-7656?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved YARN-7656. - Resolution: Resolved Assignee: Eric Yang This has been addressed as part of YARN-7605. > Can not

[jira] [Updated] (YARN-7605) Implement doAs for Api Service REST API

[ https://issues.apache.org/jira/browse/YARN-7605?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7605: Attachment: YARN-7605.008.patch > Implement doAs for Api Service REST API >

[jira] [Updated] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7590: Attachment: YARN-7590.004.patch - Fix a segmentation fault in test case. > Improve container-executor

[jira] [Commented] (YARN-7516) Security check for untrusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16300453#comment-16300453 ] Eric Yang commented on YARN-7516: - Findbug, shadedclient, and unit test failures exists in trunk, and not

[jira] [Comment Edited] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16310288#comment-16310288 ] Eric Yang edited comment on YARN-7677 at 1/3/18 9:33 PM: - I think I am stuck on

[jira] [Commented] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16310385#comment-16310385 ] Eric Yang commented on YARN-7677: - [~ebadger] I think I understand the goal now. Thank you. In current

[jira] [Commented] (YARN-7590) Improve container-executor validation check

[ https://issues.apache.org/jira/browse/YARN-7590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16309902#comment-16309902 ] Eric Yang commented on YARN-7590: - Happy New Year [~miklos.szeg...@cloudera.com], Can you review the 006

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.004.patch [~ebadger] Patch applies. The rebased patch is attached in 004. >

[jira] [Commented] (YARN-7516) Security check for untrusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16310455#comment-16310455 ] Eric Yang commented on YARN-7516: - [~ebadger] The same question has been ask by Vinod on Dec 11. It might

[jira] [Commented] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16309995#comment-16309995 ] Eric Yang commented on YARN-7677: - [~ebadger] I think I understand your scenario better now. When host and

[jira] [Commented] (YARN-7516) Security check for untrusted docker image

[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16310005#comment-16310005 ] Eric Yang commented on YARN-7516: - Ping, can someone review 003 patch? Thanks > Security check for

[jira] [Commented] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16310273#comment-16310273 ] Eric Yang commented on YARN-7677: - [~ebadger] My initial reaction would be to make docker container to

[jira] [Commented] (YARN-7677) HADOOP_CONF_DIR should not be automatically put in task environment

[ https://issues.apache.org/jira/browse/YARN-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16310288#comment-16310288 ] Eric Yang commented on YARN-7677: - I think I am stuck on understanding: {quote} It completely bypasses the

[jira] [Commented] (YARN-8445) YARN native service doesn't allow service name equals to component name

[ https://issues.apache.org/jira/browse/YARN-8445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16519484#comment-16519484 ] Eric Yang commented on YARN-8445: - +1 looks good to me.   > YARN native service doesn't allow service

[jira] [Commented] (YARN-8571) Validate service principal format prior to launching yarn service

[ https://issues.apache.org/jira/browse/YARN-8571?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16560472#comment-16560472 ] Eric Yang commented on YARN-8571: - [~billie.rinaldi] Thank you for the commit. > Validate service

[jira] [Updated] (YARN-8508) GPU does not get released even though the container is killed

[ https://issues.apache.org/jira/browse/YARN-8508?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-8508: Target Version/s: 3.2.0, 3.1.2 > GPU does not get released even though the container is killed >

[jira] [Assigned] (YARN-8600) RegistryDNS hang when remote lookup does not reply

[ https://issues.apache.org/jira/browse/YARN-8600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang reassigned YARN-8600: --- Assignee: Eric Yang > RegistryDNS hang when remote lookup does not reply >

[jira] [Commented] (YARN-8508) GPU does not get released even though the container is killed

[ https://issues.apache.org/jira/browse/YARN-8508?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16560479#comment-16560479 ] Eric Yang commented on YARN-8508: - +1 looks good to me. > GPU does not get released even though the

[jira] [Updated] (YARN-8600) RegistryDNS hang when remote lookup does not reply

[ https://issues.apache.org/jira/browse/YARN-8600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-8600: Attachment: YARN-8600.002.patch > RegistryDNS hang when remote lookup does not reply >

[jira] [Created] (YARN-8600) RegistryDNS hang when remote lookup does not reply

Eric Yang created YARN-8600: --- Summary: RegistryDNS hang when remote lookup does not reply Key: YARN-8600 URL: https://issues.apache.org/jira/browse/YARN-8600 Project: Hadoop YARN Issue Type: Bug

[jira] [Updated] (YARN-8600) RegistryDNS hang when remote lookup does not reply

[ https://issues.apache.org/jira/browse/YARN-8600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-8600: Attachment: YARN-8600.001.patch > RegistryDNS hang when remote lookup does not reply >

[jira] [Commented] (YARN-8403) Nodemanager logs failed to download file with INFO level

[ https://issues.apache.org/jira/browse/YARN-8403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16565587#comment-16565587 ] Eric Yang commented on YARN-8403: - Thank you [~billie.rinaldi] for the review and commit. > Nodemanager

[jira] [Updated] (YARN-8600) RegistryDNS hang when remote lookup does not reply

[ https://issues.apache.org/jira/browse/YARN-8600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-8600: Attachment: YARN-8600.003.patch > RegistryDNS hang when remote lookup does not reply >

[jira] [Commented] (YARN-8600) RegistryDNS hang when remote lookup does not reply

[ https://issues.apache.org/jira/browse/YARN-8600?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16565536#comment-16565536 ] Eric Yang commented on YARN-8600: - Patch 003 updated test case timeout, and improved logging for timed out

[jira] [Commented] (YARN-8600) RegistryDNS hang when remote lookup does not reply

[ https://issues.apache.org/jira/browse/YARN-8600?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16565518#comment-16565518 ] Eric Yang commented on YARN-8600: - [~shaneku...@gmail.com] Good suggestions. For timeout increase, I will

[jira] [Created] (YARN-8619) Automate docker network configuration through YARN API

Eric Yang created YARN-8619: --- Summary: Automate docker network configuration through YARN API Key: YARN-8619 URL: https://issues.apache.org/jira/browse/YARN-8619 Project: Hadoop YARN Issue Type:

[jira] [Commented] (YARN-8619) Automate docker network configuration through YARN API

[ https://issues.apache.org/jira/browse/YARN-8619?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16567558#comment-16567558 ] Eric Yang commented on YARN-8619: - Each host may need to be configured differently, and using a file

[jira] [Resolved] (YARN-8587) Delays are noticed to launch docker container

[ https://issues.apache.org/jira/browse/YARN-8587?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang resolved YARN-8587. - Resolution: Not A Bug > Delays are noticed to launch docker container >

[jira] [Commented] (YARN-8587) Delays are noticed to launch docker container

[ https://issues.apache.org/jira/browse/YARN-8587?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16567431#comment-16567431 ] Eric Yang commented on YARN-8587: - DistributedShell uses YARN v1 API, which doesn't support more

<    5   6   7   8   9   10   11   12   13   14   >