Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-149 [Umbrella] ResourceManager (RM) Fail-over
  3. YARN-1026

Test and verify ACL based ZKRMStateStore fencing for RM State Store

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Duplicate
    • None
    • None
    • None
    • None

    Description

      ZooKeeper allows create/delete ACL's for immediate children of a znode. It also has admin ACL's on a znode that allow changing the create/delete ACL's on that znode. RM instances could share the admin ACL's on the state store root znode. When an RM transitions to active, it can use the shared admin ACL's to give itself exclusive create/delete permissions on the children of the root znode. If all ZK state store operations are atomic and involve a create/delete znode then the above effectively fences other RM instances from modifying the store. This ACL change is only allowed when transitioning to active.

      Attachments

        Issue Links

          Activity

            People

              kasha Karthik Kambatla
              bikassaha Bikas Saha
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: