You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Rohith (JIRA)" <ji...@apache.org> on 2014/12/17 04:53:13 UTC
[jira] [Commented] (YARN-2973) Capacity scheduler configuration
ACLs not work.
[ https://issues.apache.org/jira/browse/YARN-2973?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14249430#comment-14249430 ]
Rohith commented on YARN-2973:
------------------------------
Queue configurations works in intersection. If leaf queue does not have access check with parent. Since parent(root) has all access, you are able to submit job. .
I feel it is problem because in reality, we can not restrict individual users across the child queue anytime unless parent has single user access.
I am keeping open for more discussion with experts. I am open to be get convinced.
> Capacity scheduler configuration ACLs not work.
> -----------------------------------------------
>
> Key: YARN-2973
> URL: https://issues.apache.org/jira/browse/YARN-2973
> Project: Hadoop YARN
> Issue Type: Bug
> Components: capacityscheduler
> Affects Versions: 2.5.0
> Environment: ubuntu 12.04, cloudera manager, cdh5.2.1
> Reporter: Jimmy Song
> Assignee: Rohith
> Labels: acl, capacity-scheduler, yarn
>
> I follow this page to configure yarn: http://archive.cloudera.com/cdh5/cdh/5/hadoop/hadoop-yarn/hadoop-yarn-site/CapacityScheduler.html.
> I configured YARN to use capacity scheduler in yarn-site.xml with yarn.resourcemanager.scheduler.class for org.apache.hadoop.yarn.server.resourcemanager.scheduler.capacity.CapacityScheduler. Then modified capacity-scheduler.xml,
> ___________________________________________________
> <?xml version="1.0"?>
> <configuration>
> <property>
> <name>yarn.scheduler.capacity.root.queues</name>
> <value>default,extract,report,tool</value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.state</name>
> <value>RUNNING</value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.default.acl_submit_applications</name>
> <value>jcsong2, y2 </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.default.acl_administer_queue</name>
> <value>jcsong2, y2 </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.default.capacity</name>
> <value>35</value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.extract.acl_submit_applications</name>
> <value>jcsong2 </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.extract.acl_administer_queue</name>
> <value>jcsong2 </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.extract.capacity</name>
> <value>15</value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.report.acl_submit_applications</name>
> <value>y2 </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.report.acl_administer_queue</name>
> <value>y2 </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.report.capacity</name>
> <value>35</value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.tool.acl_submit_applications</name>
> <value> </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.tool.acl_administer_queue</name>
> <value> </value>
> </property>
> <property>
> <name>yarn.scheduler.capacity.root.tool.capacity</name>
> <value>15</value>
> </property>
> </configuration>
> _______________________________________________
> I have enabled the acl in yarn-site.xml, but the user jcsong2 can submit applications to every queue. The queue acl does't work! And the queue used capacity more than it was configured!
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)