big-data/hadoop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

YARN-2577. Clarify ACL delimiter and how to configure ACL groups only (Mikos Christine via aw)

Browse Source
This commit is contained in:
Allen Wittenauer 2014-09-26 11:05:13 -07:00
parent 55302ccfba
commit ac70c27473
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hadoop-yarn-project/CHANGES.txt
View File

@ -256,6 +256,9 @@ Release 2.6.0 - UNRELEASED
YARN-1959. Fix headroom calculation in FairScheduler. YARN-1959. Fix headroom calculation in FairScheduler.
(Anubhav Dhoot via kasha) (Anubhav Dhoot via kasha)
YARN-2577. Clarify ACL delimiter and how to configure ACL groups only
(Miklos Christine via aw)
OPTIMIZATIONS OPTIMIZATIONS
BUG FIXES BUG FIXES

3
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-site/src/site/apt/FairScheduler.apt.vm
View File

@ -406,6 +406,9 @@ Queue Access Control Lists (ACLs)
is inside queue1, and user1 is in queue1's ACL, and user2 is in queue2's is inside queue1, and user1 is in queue1's ACL, and user2 is in queue2's
ACL, then both users may submit to queue2. ACL, then both users may submit to queue2.
<<Note:>> The delimiter is a space character. To specify only ACL groups, begin the
value with a space character.
The root queue's ACLs are "*" by default which, because ACLs are passed down, The root queue's ACLs are "*" by default which, because ACLs are passed down,
means that everybody may submit to and kill applications from every queue. means that everybody may submit to and kill applications from every queue.
To start restricting access, change the root queue's ACLs to something other To start restricting access, change the root queue's ACLs to something other