lirui-apache commented on a change in pull request #15131:
URL: https://github.com/apache/flink/pull/15131#discussion_r603759600
##########
File path:
flink-core/src/main/java/org/apache/flink/configuration/SecurityOptions.java
##########
@@ -108,6 +108,19 @@
+ " (for example, `Client,KafkaClient` to
use the credentials for ZooKeeper authentication and for"
+ " Kafka authentication)");
+ @Documentation.Section(Documentation.Sections.SECURITY_AUTH_KERBEROS)
+ public static final ConfigOption<Boolean> KERBEROS_FETCH_DELEGATION_TOKEN =
+ key("security.kerberos.fetch.delegation-token")
+ .booleanType()
+ .defaultValue(true)
+ .withDescription(
+ "Indicates whether to fetch delegation token for
external services the Flink job needs to contact. "
+ + "Only HDFS and HBase are supported, and
only works for flink-yarn at the moment. "
+ + "If true, Flink will fetch HDFS/HBase
delegation tokens and inject into Yarn AM container. "
+ + "If false, Flink will assume that the
job has delegation tokens and will not fetch them. "
+ + "This applies to submission mechanisms
like Oozie, which will obtain delegation tokens "
Review comment:
Could you please elaborate what it means by saying "This applies to
submission mechanisms like Oozie"? IIUC, Flink can't control how Oozie submits
jobs, right?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
