[YARN-47] [Umbrella] Security issues in YARN

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Assignee: Unassigned
• Reporter: Vinod Kumar Vavilapalli
• Created: 27/Aug/12 20:34
• Updated: 08/May/15 18:15
• Resolved: 03/May/15 01:17

Description

JIRA tracking YARN related security issues.

Moving over YARN only stuff from MAPREDUCE-3101.

Issue Links

• relates to: MAPREDUCE-3101 [Umbrella] Security issues in YARN

Sub-Tasks

• Move to per-node RM-NM secrets: Open
• Tests for verifying application-acl checks on the web-UI: Open
• RM renews tokens even when maxDate will soon be exceeded: Open
• DelegationTokens will be renewed forever if multiple jobs share tokens and the first one sets JOB_CANCEL_DELEGATION_TOKEN to false: Open
• AMTokens, ClientTokens and LocalizerTokens should be generated and used irrespective of kerberos: Open
• Parse html response returned by Application master when showing it via WebProxy: Open
• Add tests to verify that queue-admin-acls work with hierarchical queues: Open
• NodeManager should allow queue admins to view app-logs: Open
• Queue admin ACLs should NOT be similar to submit-acls w.r.t hierarchy.: Open