[jira] [Created] (OOZIE-1871) Investigate if we can propagate the delegation token to the action conf from the Oozie server instead of action

["Robert Kanter (JIRA)" <ji...@apache.org>]

Robert Kanter created OOZIE-1871:
------------------------------------

             Summary: Investigate if we can propagate the delegation token to the action conf from the Oozie server instead of action
                 Key: OOZIE-1871
                 URL: https://issues.apache.org/jira/browse/OOZIE-1871
             Project: Oozie
          Issue Type: Improvement
          Components: security
    Affects Versions: trunk
            Reporter: Robert Kanter


Currently, Oozie prepares a configuration for the action to use when launching MR jobs.  Oozie also provides an environment variable with the location of the tokens file.  It is up to the action's Main to:
# Load the Configuration
# Get the location of the Token file
# Propagate the token file to the loaded Configuration
# Pass the Configuration to the CLI/MR Job/etc

This isn't too much of a problem for most actions because we handle this for the user, but for the Java action, it's 4 not-obvious steps.  We should investigate if we can make this one step by having the Configuration prepared by the Oozie server already have the token file propagated to it; then actions would have 2 steps:
# Load the Configuration
# Pass the Configuration to the CLI/MR Job/etc
And the tokens would be handled automatically.

We'd still have to provide the environment variable for backwards compatibility and flexibility reasons though.



--
This message was sent by Atlassian JIRA
(v6.2#6252)