gaborgsomogyi opened a new pull request, #19825: URL: https://github.com/apache/flink/pull/19825
## What is the purpose of the change Kerberos delegation token framework is now not able to obtain and periodically re-obtain tokens from token providers. In this PR I've added such functionality. ## Brief change log * Added `security.kerberos.tokens.renewal-ratio` with default 0.75 * Added `security.kerberos.tokens.retry-wait` with default 1 hour * Added one-time delegation token obtain possibility in `obtainDelegationTokens` * Added re-occurring delegation token obtain possibility in `start` * Minor renames/fixes here and there ## Verifying this change * Additional unit tests * Manually on YARN and K8S (please see an example [here](https://gist.github.com/gaborgsomogyi/ac4f71ead8494da2f5c35265bcb1e885)) ## Does this pull request potentially affect one of the following parts: - Dependencies (does it add or upgrade a dependency): no - The public API, i.e., is any changed class annotated with `@Public(Evolving)`: yes - The serializers: no - The runtime per-record code paths (performance sensitive): no - Anything that affects deployment or recovery: JobManager (and its components), Checkpointing, Kubernetes/Yarn, ZooKeeper: no - The S3 file system connector: no ## Documentation - Does this pull request introduce a new feature? yes - If yes, how is the feature documented? All documentation is intended to be added in [FLINK-25911](https://issues.apache.org/jira/browse/FLINK-25911) when everything works as a whole -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
