[YARN-7006] [ATSv2 Security] Changes for authentication for CollectorNodemanagerProtocol

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.9.0, YARN-5355, 3.0.0-beta1
• Component/s: timelineserver
• Labels: yarn-5355-merge-blocker
• Target Version/s: YARN-5355
• Hadoop Flags: Reviewed
• Assignee: Varun Saxena
• Reporter: Varun Saxena
• Created: 13/Aug/17 19:36
• Updated: 21/Oct/17 06:05
• Resolved: 16/Aug/17 18:02

Description

Communication between Collector and NM is via RPC.
We would do kerberos based authentication for communication between these 2 components, as of now. Added SecurityInfo implementation for it.
We can think of adding token based access once collector starts outside of NM.

Also creation of timeline client within NMTimelinePublisher would be done using NM login UGI.

Issue Links

• is part of: YARN-3053 [Security] Review and implement authentication in ATS v.2