Amazon EMR 7.3.0 - Tez release notes
Amazon EMR 7.3.0 - Tez changes
| Type | Description |
|---|---|
| Improvement | Provide option to enable SSL for Tez AM Web UI Service |
Amazon EMR 7.3.0 - New configurations
| Classification | Name | Default | Description |
|---|---|---|---|
tez-site |
tez.am.tez-ui.webservice.enable.ssl |
false |
Allow enabling SSL for for the AM WebUIService |
tez-site |
tez.am.tez-ui.webservice.enable.client.auth |
false |
Allow enabling client side authentication for the AM WebUIService |
Amazon EMR 7.3.0 - Tez known issues
Tez DAG cleanup issue (EMR 6.11.0 - EMR 7.2.0) – In clusters with SSL enabled running EMR versions 6.11.0 to 7.2.0, there is a known issue where SSLHandshakeException occurs in TEZ Application Master (AM) during the DAG cleanup phase. This happens when attempting to delete intermediate shuffle data from remote nodes over HTTPS after query completion, not during the query execution. The issue occurs because Tez AM cannot read the relevant trustStore configuration when calling the shuffle handler service endpoint. However this affects only the cleaning up of shuffle data during DAG cleanup, the application(AM) level cleanup happens anyways and cleans up any lingering shuffle data. So this doesn’t lead to shuffle data accumulation.
Fix version: – EMR 7.3.0
Workaround – Add the following SSL configuration to tez-site.xml:
<property> <name>ssl.client.truststore.location</name> <value>{SSL_TRUSTSTORE_LOCATION}</value> </property>