Description
In secure mode, YARN requires the hdfs-delegation token to do localization and log aggregation on behalf of the user. But the hdfs delegation token will eventually expire after max-token-life-time. So, localization and log aggregation will fail after the token expires.
Attachments
Attachments
Issue Links
- breaks
-
YARN-2964 RM prematurely cancels tokens for jobs that submit jobs (oozie)
- Closed
-
YARN-3439 RM fails to renew token when Oozie launcher leaves before sub-job finishes
- Closed
-
YARN-2790 NM can't aggregate logs past HDFS delegation token expiry.
- Closed
- duplicates
-
YARN-2425 When Application submitted by via Yarn RM WS, log aggregation does not happens
- Resolved
- is related to
-
YARN-2794 Fix log msgs about distributing system-credentials
- Closed
-
YARN-3472 Possible leak in DelegationTokenRenewer#allTokens
- Closed
-
HDFS-7295 Support arbitrary max expiration times for delegation token
- Open