zuston commented on a change in pull request #15131:
URL: https://github.com/apache/flink/pull/15131#discussion_r612215610
##########
File path:
flink-yarn/src/main/java/org/apache/flink/yarn/YarnClusterDescriptor.java
##########
@@ -529,6 +530,17 @@ public void killCluster(ApplicationId applicationId)
throws FlinkException {
"Hadoop security with Kerberos is enabled but the
login user "
+ "does not have Kerberos credentials or
delegation tokens!");
}
+
+ boolean kerberosFetchDTEnabled =
+
flinkConfiguration.getBoolean(SecurityOptions.KERBEROS_FETCH_DELEGATION_TOKEN);
+ boolean yarnAccessFSEnabled =
+ flinkConfiguration.get(YarnConfigOptions.YARN_ACCESS) !=
null;
+ if (!kerberosFetchDTEnabled && yarnAccessFSEnabled) {
+ throw new RuntimeException(
Review comment:
`YARN_ACCESS` and `KERBEROS_FETCH_DELEGATION_TOKEN` are exclusive, may
it's better to fast fail.
Refer to:
https://github.com/apache/flink/pull/15131/files/0500d84f78d8fdb967b077fb024fda0cd4ba2d6a#r595970681
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
