Dependency Management with Spark

January 28, 2016

You are probably familiar with tools like Maven or sbt build tools to manage your dependencies, but sometimes dependency management can get more complicated in Spark. In this post, I’m going to use the joda-time library as an example issue I ran into when working with Spark dependencies. For the time being, I’m not going to discuss packaging dependencies for Python projects because that works differently from Java/Scala projects.

Note: The example problem described below is not applicable for the latest Spark version 1.6. The issue was resolved.


In Maven, your dependencies are managed in a pom.xml file. It will look something like this:




    <!-- more dependencies... -->


            <!-- more plugins... -->

spark-core and spark-streaming are listed as provided because they are provided by the cluster managers at run time. In my code, I connect to an Amazon S3 bucket as well as to a Kinesis stream, so I have dependencies listed for those libraries. Additionally I need to use the Maven shade plugin because I want an uber jar that contains not only the application classes, but also the dependency classes. The reason is that the driver and executors in Spark need access to all the classes in order to successfully execute the job, and the easiest way to do that is to package everything up in one big JAR.

I package my code into a JAR using mvn package, and if all goes well, it shows:

[INFO] ------------------------------------------------------------------------
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 18.872 s
[INFO] Finished at: 2016-01-27T16:58:00-08:00
[INFO] Final Memory: 123M/610M
[INFO] ------------------------------------------------------------------------    

Where is the error?

Although Maven successfully compiled the JAR, the execution of the code can fail at runtime. When I run my code using spark-submit and look at the logs, I encounter: AWS authentication requires a valid Date or x-amz-date header (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 54B9BA07F04C289F), S3 Extended Request ID: Qs4vHGItzXaKlRmSwuKBTSXKtEnOBOo+eIdsQ+iYr0HnK2PxP/byjI4+wCB66j2OEnrwEWT5qD4=

I google the error, and it seems like I have an older joda-time dependency being pulled in somewhere in my JAR. In order to view the dependency tree but only for the joda-time package, I run the following.

$ mvn dependency:tree -Dverbose -Dincludes="joda-time":"joda-time"

[INFO] ------------------------------------------------------------------------
[INFO] Building Demo 0.0.1-SNAPSHOT
[INFO] ------------------------------------------------------------------------
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ DemoModel ---
[INFO] com.example:Demo:jar:0.0.1-SNAPSHOT
[INFO] \- com.amazonaws:amazon-kinesis-client:jar:1.6.1:compile
[INFO]    \- com.amazonaws:aws-java-sdk-core:jar:1.10.20:compile
[INFO]       \- joda-time:joda-time:jar:2.8.1:compile
[INFO] ------------------------------------------------------------------------
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 6.134 s
[INFO] Finished at: 2016-01-28T13:37:04-08:00
[INFO] Final Memory: 29M/513M
[INFO] ------------------------------------------------------------------------

This is where confusion ensues. Normally we would have expected the error to be an older version of joda-time that was compiled, and then we can fix that by including an <exclusion> tag or explicitly listing joda-time as its own top-level dependency in the pom.xml. But here, Maven tells us that the version for joda-time is in fact 2.8.1, the exact version that we need. So how can we still get the error above?

If you encounter this type of issue, I recommend determining where the class in question is being loaded from at runtime. With spark-submit, you can specify extra Java options with:

./bin/spark-submit --master yarn-cluster --class <your-class-entrypoint> --conf "spark.executor.extraJavaOptions=-verbose:class" --conf "spark.driver.extraJavaOptions=-verbose:class" myApp.jar

You can also specify these configurations in the conf/spark-defaults.conf file like this:


Run the Spark job, inspect the logs, and you’ll find something like the following:

[Loaded org.joda.time.ReadableInstant from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded org.joda.time.DateTimeZone from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded org.joda.time.JodaTimePermission from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded org.joda.time.Chronology from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded org.joda.time.chrono.BaseChronology from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded org.joda.time.DateTimeZone$1 from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded org.joda.time.IllegalInstantException from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]
[Loaded from file:/tmp/hadoop-hduser/nm-local-dir/filecache/10/spark-assembly-1.5.0-hadoop2.6.0.jar]

The issue is that the Spark assembly JAR is also compiled with the joda-time dependency, and instead of pulling the joda-time class from our application JAR at runtime, it pulls it from Spark’s JAR. Prior to Spark 1.6, the version of joda-time compiled with Spark was 2.5, which is the reason we encounter the error even though our application JAR contains the correct version of joda-time.

The fix

One solution is to use Spark 1.6, or rebuild the Spark assembly JAR with:

build/mvn -Djoda.version=2.9 -Phadoop-2.6 -Dhadoop.version=2.6.0 -DskipTests clean package

There is also another option to use the experimental configuration userClassPathFirst. Specify in spark-submit or in the conf/spark-defaults.conf file the following:

spark.driver.userClassPathFirst true
spark.executor.userClassPathFirst true

This is an experimental feature that gives precedence to user-added JARs over Spark for classes loaded in the driver and executor. This means it will load the joda-time class from the application JAR instead of loading it from Spark’s JAR, but the caveat is that the classes used in the application JAR can now crash Spark. Unfortunately that’s exactly what happened in my case.

INFO yarn.YarnAllocator: Container marked as failed: container_1453439488983_0138_02_000002. Exit status: 1. Diagnostics: Exception from container-launch.
Container id: container_1453439488983_0138_02_000002
Exit code: 1
Stack trace: ExitCodeException exitCode=1: 
    at org.apache.hadoop.util.Shell.runCommand(
    at org.apache.hadoop.util.Shell$ShellCommandExecutor.execute(
    at org.apache.hadoop.yarn.server.nodemanager.DefaultContainerExecutor.launchContainer(
    at java.util.concurrent.ThreadPoolExecutor.runWorker(
    at java.util.concurrent.ThreadPoolExecutor$

What else can we do? The last solution I used was to download the joda-time JAR on every node in the cluster and specify the JAR in the extra classpath configuration in Spark.

spark.driver.extraClassPath /home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar
spark.executor.extraClassPath /home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar

After running the Spark job this way, we can clearly see the correct version of joda-time loaded at runtime.

[Loaded org.joda.time.ReadableInstant from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]
[Loaded org.joda.time.DateTimeZone from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]
[Loaded from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]
[Loaded org.joda.time.JodaTimePermission from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]
[Loaded org.joda.time.IllegalInstantException from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]
[Loaded from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]
[Loaded from file:/home/hduser/joda-time-2.8.1/joda-time-2.8.1.jar]


Managing dependencies can be a pain, but hopefully this gives you an idea of how to tackle similar issues. Make sure you don’t have any version conflicts with dependencies in the application JAR, and then ensure the classes of important dependencies are loaded from the application JAR as you expect, not from somewhere else.