Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-47 [Umbrella] Security issues in YARN
  3. YARN-60

NMs rejects all container tokens after secret key rolls

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 2.0.2-alpha, 0.23.3
    • 2.0.2-alpha, 0.23.3
    • nodemanager
    • None

    Description

      The NM's token secret manager will reject all container tokens after the secret key is activated which means the NM will not launch any containers including AMs. The whole yarn cluster becomes inoperable in 1d.

      Attachments

        1. YARN-60-20120829.1.txt
          41 kB
          Vinod Kumar Vavilapalli
        2. YARN-60-20120829.2.txt
          42 kB
          Vinod Kumar Vavilapalli
        3. YARN-60-20120829.txt
          38 kB
          Vinod Kumar Vavilapalli
        4. YARN-60-20120831-branch-23.txt
          41 kB
          Vinod Kumar Vavilapalli

        Issue Links

          is broken by

          Sub-task - The sub-task of the issue YARN-39 RM-NM secret-keys should be randomly generated and rolled every so often

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              vinodkv Vinod Kumar Vavilapalli
              daryn Daryn Sharp
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: