You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Vinod Kumar Vavilapalli (JIRA)" <ji...@apache.org> on 2013/04/26 02:46:17 UTC

[jira] [Commented] (YARN-575) ContainerManager APIs should be user accessible

    [ https://issues.apache.org/jira/browse/YARN-575?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13642445#comment-13642445 ] 

Vinod Kumar Vavilapalli commented on YARN-575:
----------------------------------------------

I don't think we really want the APIs to be user-accessible by opening up NM itself to the users.

startContainer():
 - should only be called by the AM.

stopContainer()/getContainerStatus():
 - Today these are only callable by the AM which launches containers - which is bad of course. Once YARN-613 is done, we will use the AMToken for authentication to the NM, so any AM can talk to a NM irrespective of whether it launched containers or not.
 - If user really wants to stop a container, or get a container-status, we can add this as an RM API - RM has enough information to tell the users - should we go that way?
                
> ContainerManager APIs should be user accessible
> -----------------------------------------------
>
>                 Key: YARN-575
>                 URL: https://issues.apache.org/jira/browse/YARN-575
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: nodemanager
>    Affects Versions: 2.0.4-alpha
>            Reporter: Siddharth Seth
>            Priority: Critical
>
> Auth for ContainerManager is based on the containerId being accessed - since this is what is used to launch containers (There's likely another jira somewhere to change this to not be containerId based).
> What this also means is the API is effectively not usable with kerberos credentials.
> Also, it should be possible to use this API with some generic tokens (RMDelegation?), instead of with Container specific tokens.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira