[YARN-3834] Scrub debug logging of tokens during resource localization.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.1
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: nodemanager
• Target Version/s: 2.8.0
• Assignee: Chris Nauroth
• Reporter: Chris Nauroth
• Created: 19/Jun/15 17:37
• Updated: 30/Aug/16 01:20
• Resolved: 22/Jun/15 00:15

Description

During resource localization, the NodeManager logs tokens at debug level to aid troubleshooting. This includes the full token representation. Best practice is to avoid logging anything secret, even at debug level. We can improve on this by changing the logging to use a scrubbed representation of the token.