-
Notifications
You must be signed in to change notification settings - Fork 28.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[SPARK-22319][Core] call loginUserFromKeytab before accessing hdfs #19540
Conversation
Thanks for the fix! I didn't test on secure cluster when did glob path support, so I didn't realize such issue. |
ok to test. |
I think branch 2.2 also has similar issue when fetching resources from remote secure HDFS. |
Test build #82924 has finished for PR 19540 at commit
|
retest this please |
Test build #82927 has finished for PR 19540 at commit
|
Could you check why the test cases failed? Thanks! |
I ran |
retest this please |
Test build #82954 has finished for PR 19540 at commit
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, @jerryshao WDYT?
LGTM, merging to master and branch 2.2. |
@sjrand , can you please create another PR against branch-2.2, it is not auto-mergeable, thanks! |
Thanks @jerryshao and @jiangxb1987. Created #19554 for branch-2.2. |
…essing hdfs In SparkSubmit, call loginUserFromKeytab before attempting to make RPC calls to the NameNode. Same as ##19540, but for branch-2.2. Manually tested for master as described in #19540. Author: Steven Rand <srand@palantir.com> Closes #19554 from sjrand/SPARK-22319-branch-2.2. Change-Id: Ic550a818fd6a3f38b356ac48029942d463738458
…essing hdfs In SparkSubmit, call loginUserFromKeytab before attempting to make RPC calls to the NameNode. Same as #apache#19540, but for branch-2.2. Manually tested for master as described in apache#19540. Author: Steven Rand <srand@palantir.com> Closes apache#19554 from sjrand/SPARK-22319-branch-2.2. Change-Id: Ic550a818fd6a3f38b356ac48029942d463738458
What changes were proposed in this pull request?
In
SparkSubmit
, callloginUserFromKeytab
before attempting to make RPC calls to the NameNode.How was this patch tested?
I manually tested this patch by:
kinit
on the host.Presumably we also want integration tests for secure clusters so that we catch this sort of thing. I'm happy to take a shot at this if it's feasible and someone can point me in the right direction.