[YARN-5549] AMLauncher#createAMContainerLaunchContext() should not log the command to be launched indiscriminately

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.7.2
• Fix Version/s: 2.8.0, 3.0.0-alpha2
• Component/s: resourcemanager
• Target Version/s: 2.8.0
• Hadoop Flags: Reviewed
• Release Note: Introduces a new configuration property, yarn.resourcemanager.amlauncher.log.command. If this property is set to true, then the AM command being launched will be masked in the RM log.
• Assignee: Daniel Templeton
• Reporter: Daniel Templeton
• Created: 22/Aug/16 21:00
• Updated: 18/Oct/16 21:51
• Resolved: 02/Sep/16 22:04

Description

The command could contain sensitive information, such as keystore passwords or AWS credentials or other. Instead of logging it as INFO, we should log it as DEBUG and include a property to disable logging it at all. Logging it to a different logger would also be viable and may create a smaller administrative footprint.