Xie YiFan created YARN-9708:
-------------------------------
Summary: Add Yarnclient#getDelegationToken API implementation and
SecureLogin in router
Key: YARN-9708
URL: https://issues.apache.org/jira/browse/YARN-9708
Project: Hadoop YARN
Issue Type: New Feature
Components: router
Affects Versions: 3.1.1
Reporter: Xie YiFan
Attachments: Add_getDelegationToken_and_SecureLogin_in_router.patch
1.we use router as proxy to manage multiple cluster which be independent of
each other in order to apply unified client. Thus, we implement our customized
AMRMProxyPolicy that doesn't broadcast ResourceRequest to other cluster.
2.Our production environment need kerberos. But router doesn't support
SecureLogin for now.
https://issues.apache.org/jira/browse/YARN-6539 desn't work. So we improvement
it.
3.Some framework like oozie would get Token via yarnclient#getDelegationToken
which router doesn't support. Our solution is that adding homeCluster to
ApplicationSubmissionContextProto & GetDelegationTokenRequestProto. Job would
be submitted with specified clusterid so that router knows which cluster to
submit this job. Router would get Token from one RM according to specified
clusterid when client call getDelegation meanwhile apply some mechanism to save
this token in memory.
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
