Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-8249

Few REST api's in RMWebServices are missing static user check

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 3.1.0
    • 2.10.0, 3.2.0, 3.1.1
    • webapp, yarn
    • None

    Description

      Few REST endpoints like node label/ scheduler-conf etc are missing static user validation check. Writable apis should not be ran for static users. This is not a security hole as such as yarn.admin.acls will be configured to certain users in secure cluster correctly. However such a check will help to have same semantics across various apis. 

      Attachments

        1. YARN-8249.branch-2.001.patch
          39 kB
          Sunil G
        2. YARN-8249.006.patch
          38 kB
          Vinod Kumar Vavilapalli
        3. YARN-8249.005.patch
          39 kB
          Sunil G
        4. YARN-8249.004.patch
          30 kB
          Sunil G
        5. YARN-8249.003.patch
          30 kB
          Sunil G
        6. YARN-8249.002.patch
          21 kB
          Sunil G
        7. YARN-8249.001.patch
          18 kB
          Sunil G

        Activity

          People

            sunilg Sunil G
            sunilg Sunil G
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: