[SLIDER-1077] Improve slider credental setup under Oozie

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Slider 0.90.2
• Fix Version/s: Slider 0.91
• Component/s: client
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 28/Jan/16 19:52
• Updated: 04/Feb/16 19:49
• Resolved: 03/Feb/16 19:42

Description

Writing YARN-4653 has shown me that slider isn't getting things right regarding Oozie support, as well as some other minor aspects of security

In particular, HADOOP_TOKEN_FILE_LOCATION must be read in and used for the credentials. What is in AbstractLauncher today works, but was was cut and paste from mapreduce without understanding what as going on.

1. also: is AbstractLauncher setting up its environment properly, and passing down HADOOP_USER_NAME (test: make sure it is logged, verify in the AM logs on an insecure launch. Or serve it up somehow and check in a minicluster)

+ test all of this in a secure-cluster-only funtest

Issue Links

• is related to: YARN-4653 Document YARN security model from the perspective of Application Developers
• relates to: SLIDER-633 Slider should support invocation via Oozie