Cloudera Docs

Limitations

YARN advanced TLS configurations restrict HTTP web communication protocols without altering standard Hadoop Remote Procedure Call (RPC) traffic across cluster services.

These operational constraints apply to HTTPS-based web endpoints in Cloudera Manager. Disabling advanced TLS control reverts YARN to regex exclusion rules, while downstream applications inherit client protocol settings.
  • RPC communication unaffected – These configurations apply only to TLS/HTTPS-based web communication. They do not affect standard Hadoop RPC traffic between YARN services.
  • Feature toggle behavior: If advanced TLS control is disabled, Cloudera Manager reverts YARN back to using regex-based exclusion rules.
  • Downstream application support: Custom applications running on MapReduce or Spark that communicate with external HTTPS endpoints through the ApplicationMaster inherit the JVM client protocol restrictions (-Djdk.tls.client.protocols). Ensure downstream endpoints accept those protocol versions.