Cloudera Docs

Automatic certificate generation for YARN containers

Automatic certificate generation for YARN containers uses the LENIENT policy to issue TLS certificates on the fly when encrypt-all-ports is enabled in Cloudera Manager.

When encrypt-all-ports is enabled in Cloudera Runtime 7.3.2 SP1, Cloudera Manager automatically configures the ResourceManager role with the properties.
yarn.resourcemanager.application-https.policy = LENIENT

The LENIENT policy permits the ResourceManager to generate TLS certificates for YARN web application endpoints on the fly. This allows web UIs and HTTPS endpoints (such as ApplicationMaster web interfaces) to encrypt traffic automatically without failing when static certificates are missing.