[YARN-8722] Failed to get native service application status when security is enabled

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Bug
• Component/s: yarn-native-services
• Assignee: Unassigned
• Reporter: Zac Zhou
• Created: 28/Aug/18 05:51
• Updated: 30/Aug/18 22:40
• Resolved: 30/Aug/18 22:40

Description

Can't get job status with the following command, after a submarine job is submitted.
bin/yarn app -status standlone-tf (service name)

The environment context is as follows:
1) Security enabled.
kerberos

2) Klist output
Ticket cache: FILE:/tmp/krb5cc_1010
Default principal: hadoop/admin@HADOOP.****.COM

Valid starting Expires Service principal
08/28/2018 10:50:07 08/28/2018 20:50:07 krbtgt/HADOOP.***.COM@HADOOP.***.COM
renew until 08/29/2018 10:50:07

3) Service spec json.
standlone-tf.json in the attachment

4) service HDFS path permission.
drwxr-x--- - hadoop hdfs 0 2018-08-27 15:54 hdfs://submarine/user/hadoop/.yarn/services/standlone-tf

drwxr-x--- - hadoop hdfs 0 2018-08-27 15:54 hdfs://submarine/user/hadoop/.yarn/services/standlone-tf/lib
rw-rw-rw 2 hadoop hdfs 2228 2018-08-27 15:54 hdfs://submarine/user/hadoop/.yarn/services/standlone-tf/standlone-tf.json

5) Stacktrace.
stack.txt in the attachment

6) yarn app -status -> error.
bin/yarn app -status standlone-tf (service name)