[YARN-8869] YARN Service Client might not work correctly with RM REST API for Kerberos authentication

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 3.1.0, 3.2.0, 3.1.1
• Fix Version/s: 3.2.0, 3.1.2, 3.3.0
• Target Version/s: 3.2.0, 3.1.2
• Hadoop Flags: Reviewed
• Assignee: Eric Yang
• Reporter: Eric Yang
• Created: 11/Oct/18 00:01
• Updated: 15/Oct/18 16:17
• Resolved: 15/Oct/18 15:53

Description

ApiServiceClient uses WebResource instead of Builder to pass Kerberos authorization header. This may not work sometimes, and it is because WebResource.header() could be bind mashed new Builder instance in some condition. This article explained the details: https://juristr.com/blog/2015/05/jersey-webresource-ignores-headers/