You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@kyuubi.apache.org by GitBox <gi...@apache.org> on 2022/05/18 12:02:36 UTC
[GitHub] [incubator-kyuubi] ulysses-you opened a new issue, #2698: [Improvement] Support kill yarn application through proxy user
ulysses-you opened a new issue, #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
### Search before asking
- [X] I have searched in the [issues](https://github.com/apache/incubator-kyuubi/issues?q=is%3Aissue) and found no similar issues.
### What would you like to be improved?
Kyuubi always uses the current user to do `yarnClient.killApplication`, e.g. hive. But if the user has no permission to do kill, the error will be thrown.
```
Caused by: java.security.AccessControlException: User hive cannot perform operation MODIFY_APP on application_1649986670278_3655140
at org.apache.kyuubi.KyuubiSQLException$.apply(KyuubiSQLException.scala:69) ~[kyuubi-common_2.12-1.5.1-incubating.jar:1.5.1-incubating]
at org.apache.kyuubi.engine.ProcBuilder.$anonfun$start$1(ProcBuilder.scala:165) ~[kyuubi-server_2.12-1.5.1-incubating.jar:1.5.1-incubating]
```
So, if the engine is created and started through proxy user, we can also use proxy user to do the kill action.
### How should we improve?
_No response_
### Are you willing to submit PR?
- [ ] Yes I am willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] turboFei commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
turboFei commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1132633545
> a superuser seems much easier to deploy for internal app management.
yes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] turboFei commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
turboFei commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1132625498
I tested and did not meet this issue.
because for me, kyuubi is in hadoop group, it is a super user.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] yaooqinn commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
yaooqinn commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1130018901
what are livy or other platform’s behaviors？
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] yaooqinn commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
yaooqinn commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1132627393
a superuser seems much easier to deploy for internal app management.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] ulysses-you commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
ulysses-you commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1129922514
@yaooqinn @wForget @turboFei what do you think about this issue ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] yaooqinn commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
yaooqinn commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1130017582
yes， better to use app user to kill
but i am also wondering whether it is common case that a user with create privilege will also have delete privilege on yarn
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [incubator-kyuubi] ulysses-you commented on issue #2698: [Improvement] Support kill yarn application through proxy user
Posted by GitBox <gi...@apache.org>.
ulysses-you commented on issue #2698:
URL: https://github.com/apache/incubator-kyuubi/issues/2698#issuecomment-1130935617
I searched some related code in Livy, it does not support kill yarn application through proxy user. I think it assumes the super user also the MODIFY_APP for yarn..
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org