org.apache.hadoop.yarn.server.resourcemanager.security

Class RMContainerTokenSecretManager

java.lang.Object

org.apache.hadoop.security.token.SecretManager<ContainerTokenIdentifier>

org.apache.hadoop.yarn.server.security.BaseContainerTokenSecretManager

org.apache.hadoop.yarn.server.resourcemanager.security.RMContainerTokenSecretManager

public class RMContainerTokenSecretManager
extends BaseContainerTokenSecretManager

SecretManager for ContainerTokens. This is RM-specific and rolls the master-keys every so often.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.security.token.SecretManager

SecretManager.InvalidToken

Field Summary

Fields inherited from class org.apache.hadoop.yarn.server.security.BaseContainerTokenSecretManager

containerTokenExpiryInterval, currentMasterKey, readLock, readWriteLock, writeLock

Constructor Summary

Constructors

Constructor and Description
RMContainerTokenSecretManager(Configuration conf)

Method Summary

Methods

Modifier and Type	Method and Description
void	activateNextMasterKey() Activate the new master-key
Token	createContainerToken(ContainerId containerId, NodeId nodeId, String appSubmitter, Resource capability) Helper function for creating ContainerTokens
MasterKey	getNextKey()
void	rollMasterKey() Creates a new master-key and sets it as the primary.
void	start()
void	stop()

Methods inherited from class org.apache.hadoop.yarn.server.security.BaseContainerTokenSecretManager

createIdentifier, createNewMasterKey, createPassword, getCurrentKey, retrievePassword, retrievePasswordInternal

Methods inherited from class org.apache.hadoop.security.token.SecretManager

checkAvailableForRead, createPassword, createSecretKey, generateSecret

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RMContainerTokenSecretManager

public RMContainerTokenSecretManager(Configuration conf)

Method Detail

start

public void start()

stop

public void stop()

rollMasterKey

@InterfaceAudience.Private
public void rollMasterKey()

Creates a new master-key and sets it as the primary.

getNextKey

@InterfaceAudience.Private
public MasterKey getNextKey()

activateNextMasterKey

@InterfaceAudience.Private
public void activateNextMasterKey()

Activate the new master-key

createContainerToken

public Token createContainerToken(ContainerId containerId,
                         NodeId nodeId,
                         String appSubmitter,
                         Resource capability)

Helper function for creating ContainerTokens

Parameters:

containerId -

nodeId -

appSubmitter -

capability -

Returns:

the container-token