Class ClientToAMTokenSecretManager
java.lang.Object
org.apache.hadoop.security.token.SecretManager<ClientToAMTokenIdentifier>
org.apache.hadoop.yarn.security.client.BaseClientToAMTokenSecretManager
org.apache.hadoop.yarn.security.client.ClientToAMTokenSecretManager
@Public
@Evolving
public class ClientToAMTokenSecretManager
extends BaseClientToAMTokenSecretManager
A simple
SecretManager for AMs to validate Client-RM tokens issued to
clients by the RM using the underlying master-key shared by RM to the AMs on
their launch. All the methods are called by either Hadoop RPC or YARN, so
this class is strictly for the purpose of inherit/extend and register with
Hadoop RPC.-
Nested Class Summary
Nested classes/interfaces inherited from class org.apache.hadoop.security.token.SecretManager
org.apache.hadoop.security.token.SecretManager.InvalidToken -
Field Summary
Fields inherited from class org.apache.hadoop.security.token.SecretManager
LOG -
Constructor Summary
ConstructorsConstructorDescriptionClientToAMTokenSecretManager(org.apache.hadoop.yarn.api.records.ApplicationAttemptId applicationAttemptID, byte[] key) -
Method Summary
Modifier and TypeMethodDescriptiongetMasterKey(org.apache.hadoop.yarn.api.records.ApplicationAttemptId applicationAttemptID) byte[]retrievePassword(ClientToAMTokenIdentifier identifier) voidsetMasterKey(byte[] key) Methods inherited from class org.apache.hadoop.yarn.security.client.BaseClientToAMTokenSecretManager
createIdentifier, createPasswordMethods inherited from class org.apache.hadoop.security.token.SecretManager
checkAvailableForRead, createPassword, createSecretKey, generateSecret, retriableRetrievePassword, update, validateSecretKeyLength
-
Constructor Details
-
ClientToAMTokenSecretManager
public ClientToAMTokenSecretManager(org.apache.hadoop.yarn.api.records.ApplicationAttemptId applicationAttemptID, byte[] key)
-
-
Method Details
-
retrievePassword
public byte[] retrievePassword(ClientToAMTokenIdentifier identifier) throws org.apache.hadoop.security.token.SecretManager.InvalidToken - Overrides:
retrievePasswordin classBaseClientToAMTokenSecretManager- Throws:
org.apache.hadoop.security.token.SecretManager.InvalidToken
-
getMasterKey
public SecretKey getMasterKey(org.apache.hadoop.yarn.api.records.ApplicationAttemptId applicationAttemptID) - Specified by:
getMasterKeyin classBaseClientToAMTokenSecretManager
-
setMasterKey
public void setMasterKey(byte[] key)
-