zhouyifan279 opened a new issue #1007:
URL: https://github.com/apache/incubator-kyuubi/issues/1007


   ### 1. Describe the feature
   This is the first sub task of #913.
   In this task, the basic delegation token renewal framework is implemented in 
a service named HadoopDelegationTokenManager.
   
   Delegation tokens are managed in user granularity and are periodically 
renewed.
   
   Note: Sending delegation token from server to  engine will be done in 
another task.
   
   ### 2. Motivation
   See #913 
   
   ### 3. Describe the solution
   HadoopDelegationTokenManager will be a member of class KyuubiSessionManager.
   
   When opening a KyuubiSession, 
HadoopDelegationTokenManager#obtainDelegationTokens is called to get delegation 
tokens of EngineRef#appUser.   
   
   If delegation tokens of EngineRef#appUser have been obtained before, a  
CredentialsRef object containing  delegation tokens is returned immediately.
   Else, HadoopDelegationTokenManager obtains delegation tokens and spawn a 
scheduled task to renew them. Method obtainDelegationTokens returns 
CredentialsRef when  delegation tokens  are obtained.
   
   CredentialsRef has a field named epoch, which is increased in the scheduled 
task to indicate delegation tokens updates.
   
   ### 4. Additional context
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to