-
Notifications
You must be signed in to change notification settings - Fork 48
Closed
Labels
Description
Basically in title.
Default response for non-authenticated request is 401 to enforce handshake with new Kerberos ticket from client. Sadly, current code is expecting 200 OK response for basic activeness check.
So if your cluster is kerberized and requires auth, you will fail to initialize resourcemanager context and code will crash with exception "No RM is active"
Options
- Accept 401 as valid response for active RM validation
- Inject/rewrite active check to use authentication for access via something more modern like requests library (existing is very python-native but not flexible for Auth as it requires to do headers meddling manually)