[jira] [Commented] (HADOOP-19181) S3A: IAMCredentialsProvider throttling results in AWS auth failures

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-19181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18056963#comment-18056963 ] 

ASF GitHub Bot commented on HADOOP-19181:
-----------------------------------------

steveloughran opened a new pull request, #8234:
URL: https://github.com/apache/hadoop/pull/8234

   
   Hard-code a 15 minute  advance time for credential renewal, so even if a large number of processes simultaneously trying to renew their tokens through IAM requests may trigger throttling, the asynchronous refresh thread has minutes of backoff and retry before the existing credentials become invalid.
   
   + Add a test case to explicitly instantiate the class and ask for credentials doesn't care about whether credentials are returned (EC2 runs) or if NoAwsCredentialsException is returned -any other exception is raised as a failure.
   + Make test suite subclass of HadoopTestBase to avoid instantiating s3a fs.
   
   Contains HADOOP-19748: S3A: ITestAssumeRole tests failing now STS returns detailed
    error messages
   
   
   (This is a backport which I thought I'd already applied; will merge once yetus is happy)
   
   
   ### How was this patch tested?
   
   s3 london; fixes all the assume role test failures
   
   
   ### For code changes:
   
   - [X] Does the title or this PR starts with the corresponding JIRA issue id (e.g. 'HADOOP-17799. Your PR title ...')?
   - [X] Object storage: have the integration tests been executed and the endpoint declared according to the connector-specific documentation?
   - [ ] If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under [ASF 2.0](http://www.apache.org/legal/resolved.html#category-a)?
   - [ ] If applicable, have you updated the `LICENSE`, `LICENSE-binary`, `NOTICE-binary` files?
   
   ### AI Tooling
   
   If an AI tool was used:
   
   - [ ] The PR includes the phrase "Contains content generated by <tool>"
         where <tool> is the name of the AI tool used.
   - [ ] My use of AI contributions follows the ASF legal policy
         https://www.apache.org/legal/generative-tooling.html




> S3A: IAMCredentialsProvider throttling results in AWS auth failures
> -------------------------------------------------------------------
>
>                 Key: HADOOP-19181
>                 URL: https://issues.apache.org/jira/browse/HADOOP-19181
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: fs/s3
>    Affects Versions: 3.4.0
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>            Priority: Blocker
>              Labels: pull-request-available
>             Fix For: 3.4.3
>
>
> Tests report throttling errors in IAM being remapped to noauth and failure
> Again, impala tests, but with multiple processes on same host. this means that HADOOP-18945 isn't sufficient as even if it ensures a singleton instance for a process
> * it doesn't if there are many test buckets (fixable)
> * it doesn't work across processes (not fixable)
> we may be able to 
> * use a singleton across all filesystem instances
> * once we know how throttling is reported, handle it through retries + error/stats collection



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org