clemlabprojects / ambari

Fork of Apache Ambari maintained by Clemlab Company
https://www.clemlab.com
Apache License 2.0
42 stars 19 forks source link

Yarn's timeline service 1.5 failed after enabled kerberos #48

Open farshad-allahdadi opened 10 months ago

farshad-allahdadi commented 10 months ago

Log: 24/01/02 01:24:03 ERROR client.ServiceClient: Got exception creating tarball and uploading to HDFS org.apache.hadoop.security.AccessControlException: Permission denied: user=yarn, access=WRITE, inode="/odp/apps/1.2.1.0-134/yarn":hdfs:hadoop:dr-xr-xr-x I should run these to fix it: dr-xr-xr-x - hdfs hadoop 0 2023-12-31 03:38 /odp/apps/1.2.1.0-134/yarn [hdfs@my root]$ hdfs dfs -chown -R yarn:hadoop /odp/apps/1.2.1.0-134/yarn hdfs dfs -chmod -R u+w /odp/apps/1.2.1.0-134/yarn drwxr-xr-x - yarn hadoop 0 2023-12-31 03:38 /odp/apps/1.2.1.0-134/yarn

lucasbak commented 10 months ago

You need to add proper authorization on HDFS, do you have ranger enable ? Ambari creates ranger policy automatically up YARN START.

Best regards

farshad-allahdadi commented 10 months ago

No, I did not enabled Ranger Yet, I will check if that fixes the problem, anyway what if someone is not going to use Ranger at all?

lucasbak commented 10 months ago

If you don't wan't ranger enabled, the permission should be set on HDFS ACL, Ambari should do it, if not, we need to add it in YARN startup script.

lucasbak commented 10 months ago

Creating an issue to track it also