[MAPREDUCE-3942] Randomize master key generation for ApplicationTokenSecretManager and roll it every so often

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.23.0
• Fix Version/s: 0.23.3, 2.0.2-alpha
• Component/s: mrv2, security
• Target Version/s: 0.23.3
• Hadoop Flags: Reviewed
• Assignee: Vinod Kumar Vavilapalli
• Reporter: Vinod Kumar Vavilapalli
• Created: 29/Feb/12 21:47
• Updated: 11/Oct/12 17:48
• Resolved: 17/Apr/12 18:57

Description

• Master key for authentication of AMs need to be automatically generated.
• The key needs to be rolled every so often but AMs with old keys should continue to be able to talk to the RM.

Issue Links

• blocks: YARN-39 RM-NM secret-keys should be randomly generated and rolled every so often
• incorporates: MAPREDUCE-4139 Potential ResourceManager deadlock when SchedulerEventDispatcher is stopped