[YARN-10439] Yarn Service AM listens on all IP's on the machine

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.4.0, 3.3.1
• Component/s: security, yarn-native-services
• Hadoop Flags: Reviewed
• Assignee: D M Murali Krishna Reddy
• Reporter: D M Murali Krishna Reddy
• Created: 16/Sep/20 19:36
• Updated: 30/Jul/21 12:37
• Resolved: 30/Mar/21 04:19

Description

In ClientAMService.java, rpc server is created without passing hostname, due to which the client listens on 0.0.0.0, which is a bad practise.

 

InetSocketAddress address = new InetSocketAddress(0);

server = rpc.getServer(ClientAMProtocol.class, this, address, conf, context.secretManager, 1);

 

Also, a new configuration must be added similar to "yarn.app.mapreduce.am.job.client.port-range", so that client can configure port range for yarn service AM to bind.

Issue Links

• duplicates: YARN-9907 Make YARN Service AM RPC port configurable