XComp commented on a change in pull request #15131:
URL: https://github.com/apache/flink/pull/15131#discussion_r595015839
##########
File path: flink-yarn/src/main/java/org/apache/flink/yarn/Utils.java
##########
@@ -213,9 +213,9 @@ public static void setTokensFor(
Collection<Token<? extends TokenIdentifier>> usrTok =
currUsr.getTokens();
for (Token<? extends TokenIdentifier> token : usrTok) {
- final Text id = new Text(token.getIdentifier());
- LOG.info("Adding user token " + id + " with " + token);
- credentials.addToken(id, token);
+ final Text alias = new Text(token.getService());
+ LOG.info("Adding user token " + alias + " with " + token);
+ credentials.addToken(alias, token);
Review comment:
Are there different delegation tokens for the different namenodes Flink
has to deal with? I would have had assumed that there's only a single token for
Flink accessing the Yarn cluster. Could you point me to the Hadoop source code
you're referring to.
Sorry if it's a bit tedious. I haven't worked with Yarn/Kerberos, yet
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
