https://github.com/apache/spark
Revision 0848df1bb6f27fc7182e0e52efeef1407fd532d2 authored by Sanket Chintapalli on 07 September 2017, 17:20:39 UTC, committed by Marcelo Vanzin on 07 September 2017, 17:20:39 UTC
## What changes were proposed in this pull request?
I observed this while running a oozie job trying to connect to hbase via spark.
It look like the creds are not being passed in thehttps://github.com/apache/spark/blob/branch-2.2/resource-managers/yarn/src/main/scala/org/apache/spark/deploy/yarn/security/HadoopFSCredentialProvider.scala#L53 for 2.2 release.
More Info as to why it fails on secure grid:
Oozie client gets the necessary tokens the application needs before launching. It passes those tokens along to the oozie launcher job (MR job) which will then actually call the Spark client to launch the spark app and pass the tokens along.
The oozie launcher job cannot get anymore tokens because all it has is tokens ( you can't get tokens with tokens, you need tgt or keytab).
The error here is because the launcher job runs the Spark Client to submit the spark job but the spark client doesn't see that it already has the hdfs tokens so it tries to get more, which ends with the exception.
There was a change with SPARK-19021 to generalize the hdfs credentials provider that changed it so we don't pass the existing credentials into the call to get tokens so it doesn't realize it already has the necessary tokens.

https://issues.apache.org/jira/browse/SPARK-21890
Modified to pass creds to get delegation tokens

## How was this patch tested?
Manual testing on our secure cluster

Author: Sanket Chintapalli <schintap@yahoo-inc.com>

Closes #19103 from redsanket/SPARK-21890.
1 parent 49968de
History
Tip revision: 0848df1bb6f27fc7182e0e52efeef1407fd532d2 authored by Sanket Chintapalli on 07 September 2017, 17:20:39 UTC
[SPARK-21890] Credentials not being passed to add the tokens
Tip revision: 0848df1

README.md

back to top