viirya commented on a change in pull request #31761:
URL: https://github.com/apache/spark/pull/31761#discussion_r592897399
##########
File path: core/src/main/scala/org/apache/spark/internal/config/package.scala
##########
@@ -691,6 +691,15 @@ package object config {
.toSequence
.createWithDefault(Nil)
+ private[spark] val KERBEROS_FILESYSTEM_RENEWAL_EXCLUDE =
+ ConfigBuilder("spark.kerberos.renewal.exclude.hadoopFileSystems")
+ .doc("The list of Hadoop filesystem URLs whose hosts will be excluded
from " +
Review comment:
> so just to be clear, these fileystems are ones the user specified in
spark.kerberos.access.hadoopFileSystems so it wants to get initial tokens for
them but then later we don't want to renew, correct? We should perhaps update
doc to mention that.
> It would be nice to know if this works with other cluster managers like
k8s - @ifilonenko @mccheah maybe?
Hmm, for the customer case, the requirement is to prevent YARN from renewing
the delegation token obtained. It doesn't matter if the file system is
defaultFs/stageFs or the ones specified in
`spark.kerberos.access.hadoopFileSystems`. That said, Spark still can obtain
the token for the ones in `spark.kerberos.access.hadoopFileSystems`, but we
don't want YARN to renew it.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
