-
Notifications
You must be signed in to change notification settings - Fork 8.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
YARN-11255. Support loading alternative docker client config from system environment #4884
Conversation
💔 -1 overall
This message was automatically generated. |
💔 -1 overall
This message was automatically generated. |
UT Failure
is not relevant to this change. Tried running it in local and its passing. |
@@ -215,6 +217,12 @@ public class DockerLinuxContainerRuntime extends OCIContainerRuntime { | |||
public static final String ENV_DOCKER_CONTAINER_IMAGE = | |||
"YARN_CONTAINER_RUNTIME_DOCKER_IMAGE"; | |||
@InterfaceAudience.Private | |||
public static final String ENV_DOCKER_CONTAINER_IMAGE_FILE = |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @ashutoshcipher for the patch. This variable is not used anywhere. Could you remove it if not needed.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @PrabhuJoseph. Addressed in my latest commit.
Thanks @ashutoshcipher for the patch. Overall looks good to me except a minor one. Could you also document the steps to run an application like Spark using this new environment variable YARN_CONTAINER_RUNTIME_DOCKER_CLIENT_CONFIG in https://hadoop.apache.org/docs/r3.0.2/hadoop-yarn/hadoop-yarn-site/DockerContainers.html For Example:
|
Thanks @PrabhuJoseph . Added the documentation |
💔 -1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
Thanks @ashutoshcipher for the patch. LGTM, +1. Will commit it if no other comments. |
Thanks @PrabhuJoseph for your reviewing and approving. |
…tem environment (apache#4884) Co-authored-by: Ashutosh Gupta <ashugpt@amazon.com>
Description of PR
JIRA - YARN-11255
Support loading alternative docker client config from system environment
When using YARN docker support, although the hadoop shell supported
to pass the client config file that contains security token to generate the docker config for each job as a temporary file.
For other applications that submit jobs to YARN, e.g. Spark, which loads the docker setting via system environment e.g.
will not be able to add those authorization token because this system environment isn't considered in YARN.
Add genetic solution to handle these kind of cases without making changes in spark code or others
Eg
When using remote container registry, the
YARN_CONTAINER_RUNTIME_DOCKER_CLIENT_CONFIG
must reference the config.jsonfile containing the credentials used to authenticate.
How was this patch tested?
Unit tests and manually verified by running on EMR.
For code changes:
LICENSE
,LICENSE-binary
,NOTICE-binary
files?