This is an automated email from the ASF dual-hosted git repository.
mbalassi pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/flink.git
from 0efcab872c7 [hotfix][misprint] Remove duplicate word `version`
new 21a1bf53ad5 [FLINK-30421][runtime][security] Move TGT renewal to
hadoop module
new 6e5f8694b66 [FLINK-30422][runtime][security] Generalize token
framework provider API
new 37ad3434b88 [FLINK-30339][runtime][security] Add a unified delegation
token manager
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
docs/content.zh/docs/deployment/config.md | 5 +
.../generated/security_auth_kerberos_section.html | 18 --
.../generated/security_configuration.html | 36 ++--
.../security_delegation_token_section.html | 30 +++
.../flink/annotation/docs/Documentation.java | 1 +
.../flink/configuration/SecurityOptions.java | 37 ++++
.../runtime/entrypoint/ClusterEntrypoint.java | 9 +-
.../flink/runtime/minicluster/MiniCluster.java | 9 +-
.../runtime/resourcemanager/ResourceManager.java | 3 +-
.../runtime/security/SecurityConfiguration.java | 9 +
.../runtime/security/modules/HadoopModule.java | 54 +++++-
...ger.java => DefaultDelegationTokenManager.java} | 207 ++++++++-------------
...a => DefaultDelegationTokenManagerFactory.java} | 31 +--
...Listener.java => DelegationTokenContainer.java} | 31 +--
.../security/token/DelegationTokenManager.java | 16 +-
...nProvider.java => DelegationTokenProvider.java} | 47 +++--
.../security/token/NoOpDelegationTokenManager.java | 5 +-
.../token/hadoop/HBaseDelegationTokenProvider.java | 153 +++++++--------
.../token/hadoop/HadoopDelegationTokenUpdater.java | 18 +-
.../hadoop/HadoopFSDelegationTokenProvider.java | 60 +++---
.../flink/runtime/taskexecutor/TaskExecutor.java | 6 +-
...runtime.security.token.DelegationTokenProvider} | 0
.../runtime/security/modules/HadoopModuleTest.java | 54 ++++++
.../token/DefaultDelegationTokenManagerTest.java | 135 ++++++++++++++
.../token/DelegationTokenContainerTest.java | 73 ++++++++
... ExceptionThrowingDelegationTokenProvider.java} | 30 ++-
...vider.java => TestDelegationTokenProvider.java} | 17 +-
.../hadoop/HadoopDelegationTokenConverterTest.java | 2 +-
.../hadoop/HadoopDelegationTokenUpdaterITCase.java | 15 +-
.../KerberosDelegationTokenManagerITCase.java | 189 -------------------
...runtime.security.token.DelegationTokenProvider} | 4 +-
.../apache/flink/yarn/YarnClusterDescriptor.java | 14 +-
32 files changed, 717 insertions(+), 601 deletions(-)
create mode 100644
docs/layouts/shortcodes/generated/security_delegation_token_section.html
rename
flink-runtime/src/main/java/org/apache/flink/runtime/security/token/{hadoop/KerberosDelegationTokenManager.java
=> DefaultDelegationTokenManager.java} (50%)
rename
flink-runtime/src/main/java/org/apache/flink/runtime/security/token/{hadoop/KerberosDelegationTokenManagerFactory.java
=> DefaultDelegationTokenManagerFactory.java} (51%)
rename
flink-runtime/src/main/java/org/apache/flink/runtime/security/token/{DelegationTokenListener.java
=> DelegationTokenContainer.java} (61%)
rename
flink-runtime/src/main/java/org/apache/flink/runtime/security/token/{hadoop/HadoopDelegationTokenProvider.java
=> DelegationTokenProvider.java} (60%)
rename
flink-runtime/src/main/resources/META-INF/services/{org.apache.flink.runtime.security.token.hadoop.HadoopDelegationTokenProvider
=> org.apache.flink.runtime.security.token.DelegationTokenProvider} (100%)
create mode 100644
flink-runtime/src/test/java/org/apache/flink/runtime/security/modules/HadoopModuleTest.java
create mode 100644
flink-runtime/src/test/java/org/apache/flink/runtime/security/token/DefaultDelegationTokenManagerTest.java
create mode 100644
flink-runtime/src/test/java/org/apache/flink/runtime/security/token/DelegationTokenContainerTest.java
rename
flink-runtime/src/test/java/org/apache/flink/runtime/security/token/{hadoop/ExceptionThrowingHadoopDelegationTokenProvider.java
=> ExceptionThrowingDelegationTokenProvider.java} (67%)
rename
flink-runtime/src/test/java/org/apache/flink/runtime/security/token/{hadoop/TestHadoopDelegationTokenProvider.java
=> TestDelegationTokenProvider.java} (70%)
delete mode 100644
flink-runtime/src/test/java/org/apache/flink/runtime/security/token/hadoop/KerberosDelegationTokenManagerITCase.java
rename
flink-runtime/src/test/resources/META-INF/services/{org.apache.flink.runtime.security.token.hadoop.HadoopDelegationTokenProvider
=> org.apache.flink.runtime.security.token.DelegationTokenProvider} (83%)