[YARN-575] ContainerManager APIs should be user accessible

• Type: Sub-task
• Status: Resolved
• Priority: Critical
• Resolution: Won't Fix
• Affects Version/s: 2.0.4-alpha
• Component/s: nodemanager
• Target Version/s: 2.1.0-beta
• Assignee: Unassigned
• Reporter: Siddharth Seth
• Created: 13/Apr/13 02:56
• Updated: 01/May/15 20:32
• Resolved: 01/May/15 20:32

Description

Auth for ContainerManager is based on the containerId being accessed - since this is what is used to launch containers (There's likely another jira somewhere to change this to not be containerId based).
What this also means is the API is effectively not usable with kerberos credentials.
Also, it should be possible to use this API with some generic tokens (RMDelegation?), instead of with Container specific tokens.

Issue Links

• is related to: YARN-613 Create NM proxy per NM instead of per container