Uploaded image for project: 'Apache Storm'
  1. Apache Storm
  2. STORM-2093

Cannot download OOM heap dumps on MT storm systems through UI

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.0.0
    • Component/s: storm-core
    • Labels:
      None

      Description

      If you are running storm in a secure multi-tenant configuration, it would have the storm.cluster.user having a worker.launcher.group that is disjoint from all users' groups running processes in the cluster.

      If a topology is submitted with JVM arguments having it do a heap dump on OOM, that dump will be created with the headless user having read permissions, and the group ownership will be correctly assigned to the worker.launcher.group, but all group read / write permissions will be off.

      This will prevent the logviewer daemon from being able to serve the generated heap dump through the logviewer web interface. The heap dump will be in the drop down list to swich to, which would in turn trigger the download, but a 500 is returned because the logviewer does not have permission to read it.

      For heap files generated through the UI, this is not a problem as permissions are set when the user triggers the heap dump.

        Attachments

          Activity

            People

            • Assignee:
              ethanli Ethan Li
              Reporter:
              ppoulosk Paul Poulosky
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 4h 10m
                4h 10m