gaborgsomogyi commented on code in PR #21511:
URL: https://github.com/apache/flink/pull/21511#discussion_r1049385770


##########
flink-runtime/src/main/java/org/apache/flink/runtime/security/modules/HadoopModule.java:
##########
@@ -75,6 +83,10 @@ public void install() throws SecurityInstallException {
                                         new File(fileLocation), 
hadoopConfiguration);
                         loginUser.addCredentials(credentials);
                     }
+                    tgtRenewalExecutorService =

Review Comment:
   Wait a minute here, just realized the place where this comment added. Maybe 
you mix up TGT and delegation token. This is TGT renewal but 
HADOOP_TOKEN_FILE_LOCATION provides delegation tokens in a file. TGT can come 
from 2 sources:
   * Get from keytab -> this we're renewing
   * TGT cache file (which is basically `/tmp/krb...{uid}` or something) -> 
this case it's the user's responsibility to keep it alive (most probably w/ 
re-occuring `kinit` cmd)
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to