Status
Current state: [ UNDER DISCUSSION ]
Discussion thread: <link to mailing list DISCUSS thread>
JIRA: SAMZA-2405
Released:
Problem
Samza Yarn follows a multi-stage deployment model, where Job Runner, which runs on the submission host, reads configuration, performs planning and persist config in the coordinator stream before submitting the job to Yarn cluster. In Yarn, Application Master (AM) reads config from coordinator stream before spinning up containers to execute. Split of responsibility between job runner and AM is operationally confusing, and makes debugging the pipeline difficult with multiple points of failure. In addition, since planning invokes user code, it usually requires isolation on the runner from security perspective to guard the framework from malicious user code, or a malicious user can gain access to other user jobs running on the same runner.
Proposed Changes
We will provide a new config loader interface, which will be used by AM fetch the config directly. AM will invoke config loader will fetch job config, performs planning, generate DAG and persist the final config back to coordinator stream.
Job runner will only submit the job to Yarn with the provided submission related configs. These configs include
- configs directly related to job submission, such as yarn.package.path, job.name etc.
- configs needed by the config loader on AM to fetch config from, such as path to the property file in the tarball.
- configs that users would like to override.
As this changes how the runner starts a job, we will take this opportunity to revamp samza job start up approach as well, such that all job submission related configs will provided with --config. This is consistent with other stream processing projects, such as Flink, Spark and Dataflow.
We will force users to update how they start their Samza jobs.
Public Interfaces
The following job config will be introduced to configure loader class on AM to fetch config, which points to a ConfigLoader class:
- job.config.loader.class
ConfigLoader
Interface which AM relies on to read configuration from. It takes in a properties map, which defines the variables it needed in order to get the proper config.
This interface will replace the existing ConfigFactory interface as we no longer need complex configs in runner anymore. Providing minimum Yarn related configs using --config when invoking run-app.sh will be sufficient.
public interface ConfigLoader { /** * Build a specific Config given job submission config. * @param config Config specified during job submission containing information necessary for this ConfigLoader to fetch the complete config. * @return Newly constructed Config. */ Config getConfig(Config config); }
YarnJob#buildEnvironmentAll the configs provided in the start up script will be passed to AM through environment variable and loaded by the designated config loader to load the complete config. Config provided by startup script will override those read by the loader.
The full list of configs can be found in References#Complete list of job submission configs
Take wikipedia-feed in Hello Samza as an example:
deploy/samza/bin/run-app.sh \ --config job.name=wikipedia-stats \ --config job.factory.class=org.apache.samza.job.yarn.YarnJobFactory \ --config yarn.package.path=file://${basedir}/target/${project.artifactId}-${pom.version}-dist.tar.gz \ --config job.config.loader.class==org.apache.samza.config.loader.PropertiesConfigLoader \ --config job.config.loader.properties.path=/__package/config/wikipedia-feed.properties
Rejected Alternatives
The above approach requires existing users to update its way to start a samza job. Alternatively, we may keep the ability for runner to read from a local config, and AM will load the config using with the loader again.
Take wikipedia-feed in Hello Samza as an example:
deploy/samza/bin/run-app.sh \ --config job.config.loader.class==org.apache.samza.config.loader.PropertiesConfigLoader \ --config local.config.path=/config/wikipedia-feed.properties --config config.path=/__package/config/wikipedia-feed.properties
We need to either provide multiple config path so PropertiesConfigLoader can load the corresponding file path or implement PropertiesConfigLoader in a way that works on both runner and AM with a single path.
This approach is not in favor as it is introducing much complex logic in config handling, thus resulting more confusion but does provide a certain level of ease of migration.
Implementation and Test Plan
JobConfig
We will add one new configs in JobConfig as well as a config prefix that wraps the properties needed for the loader to load config:
// Configuration to a fully qualified class name to load config from. public static final String CONFIG_LOADER_CLASS = "job.config.loader.class"; // Prefix to configure the properties needed for the config loader to fetch the full config public static final STring CONFIG_LOADER_PROPERTIES_PREFIX = "job.config.loader.properties."
PropertiesConfigLoader
Default implementation of ConfigLoader, which reads "path" from the input properties, which leads to a property file.
public class PropertiesConfigLoader extends ConfigLoader { /** * Build a specific Config given job submission config. * @param config Config specified during job submission containing information necessary for this ConfigLoader to fetch the complete config. * @return Newly constructed Config. */ override def getConfig(config: Config): Config = { val path = config.get("job.config.loader.properties.path") val props = new Properties() val in = new FileInputStream(path) props.load(in) in.close() debug("got config %s from config %s" format (props, path)) new MapConfig(props.asScala.asJava, config) } }
RemoteApplicationRunner
RemoteApplicationRunner#run will simplify submit the job to Yarn given the submission configs.
@Override public void run(ExternalContext externalContext) { JobRunner runner = new JobRunner(config); runner.getJobFactory().getJob(config).submit(); }
YarnJob
YarnJob#buildEnvironment will wrap the provided start up config as env variable to pass to Yarn.
private[yarn] def buildEnvironment(config: Config, yarnConfig: YarnConfig, jobConfig: JobConfig): Map[String, String] = { val envMapBuilder = Map.newBuilder[String, String] envMapBuilder += ShellCommandConfig.ENV_CONFIG -> Util.envVarEscape(SamzaObjectMapper.getObjectMapper.writeValueAsString(config))
ClusterBasedJobCoordinator
ClusterBasedJobCoordinator#main will construct the application config through config loader provided in environment variables.
Compatibility, Deprecation, and Migration Plan
Backward Incompatible.
Changes will be announced in Samza 1.3 and takes effect in Samza 1.4
Users need to change job submission script and provide related configs explicitly through --config, instead of using --config-factory and --config-path to load local file;
References
- Complete list of job submission configs
[Required] job.factory.class [Required] job.name [Required] yarn.package.path [Optional] app.runner.class [Optional] yarn.resourcemanager.address [Optional] job.id [Optional] yarn.application.type [Optional] fs.*.impl [Optional] samza.cluster.based.job.coordinator.dependency.isolation.enabled [Optional] yarn.am.opts [Optional] yarn.am.java.home [Optional] yarn.am.container.memory.mb [Optional] yarn.am.container.cpu.cores [Optional] yarn.queue [Optional] yarn.am.container.label [Optional] yarn.resources.*