gaborgsomogyi opened a new pull request, #19372:
URL: https://github.com/apache/flink/pull/19372
## What is the purpose of the change
`KerberosDelegationTokenManager` needs a valid TGT in order to obtain
delegation tokens. In this PR I've added periodic kerberos relogin when
configured properly.
## Brief change log
* Added `security.kerberos.relogin.period` config with default 1 minute.
* Added TGT renew thread when user uses keytab.
## Verifying this change
* Additional unit tests
* Manually on YARN cluster
* Please be aware K8S is not tested
## Does this pull request potentially affect one of the following parts:
- Dependencies (does it add or upgrade a dependency): no
- The public API, i.e., is any changed class annotated with
`@Public(Evolving)`: no
- The serializers: no
- The runtime per-record code paths (performance sensitive): no
- Anything that affects deployment or recovery: JobManager (and its
components), Checkpointing, Kubernetes/Yarn, ZooKeeper: no
- The S3 file system connector: no
## Documentation
- Does this pull request introduce a new feature? yes
- If yes, how is the feature documented? All documentation is intended to
be added in [FLINK-25911](https://issues.apache.org/jira/browse/FLINK-25911)
when everything works as a whole
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
