lirui-apache commented on a change in pull request #15131:
URL: https://github.com/apache/flink/pull/15131#discussion_r602151342
##########
File path:
flink-core/src/main/java/org/apache/flink/configuration/SecurityOptions.java
##########
@@ -108,6 +108,18 @@
+ " (for example, `Client,KafkaClient` to
use the credentials for ZooKeeper authentication and for"
+ " Kafka authentication)");
+ @Documentation.Section(Documentation.Sections.SECURITY_AUTH_KERBEROS)
+ public static final ConfigOption<Boolean> KERBEROS_FETCH_DELEGATION_TOKEN =
+ key("security.kerberos.fetch.delegation-token")
+ .booleanType()
+ .defaultValue(true)
+ .withDescription(
+ "Indicates whether to fetch delegation token. If
true, Flink will fetch "
+ + "HDFS/HBase delegation tokens and inject
into AM container."
Review comment:
I think we should have a more generic description for this option, maybe
something like "whether to fetch delegation tokens for external services the
Flink job needs to contact". We can mention only HDFS and HBase are supported,
and only works for flink-yarn at the moment.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
