zhouyifan279 opened a new issue #915: URL: https://github.com/apache/incubator-kyuubi/issues/915
### 1. Describe the feature Renew DelegationTokens of HDFS, HiveMetaStore, etc for each user. ### 2. Motivation This is a sub-task under umbrella issue #913. ### 3. Describe the solution Steps: 1. Run a DelegationTokenRenew task immediatelly when user first logged in. 2. Save obtained DelegationTokens in a <user, credentials> map. 3. Run the following tasks periodically (configured by property kyuubi.security.credentials.renewalInterval). Introduced properties: Key | Default | Meaning | Type ---- | -------- | ---------- | ----- kyuubi.security.credentials.renewalInterval | PT1H | How often Kyuubi renews one user's DelegationTokens | duration kyuubi.security.credentials.hive.enabled | true | Whether to renew HiveMetaStore DelegationToken | boolean kyuubi.security.credentials.hadoopfs.enabled | true | Whether to renew HadoopFS DelegationToken | boolean kyuubi.security.credentials.hadoopfs.urls | \<undefined> | Extra Hadoop filesystem URLs for which to request delegation tokens. The filesystem that hosts fs.defaultFS does not need to be listed here. | string ### 4. Additional context -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
