vanzin commented on a change in pull request #23525: [SPARK-26595][core] Allow
credential renewal based on kerberos ticket cache.
URL: https://github.com/apache/spark/pull/23525#discussion_r250321505
##########
File path:
core/src/main/scala/org/apache/spark/deploy/security/HadoopFSDelegationTokenProvider.scala
##########
@@ -114,7 +114,13 @@ private[deploy] class
HadoopFSDelegationTokenProvider(fileSystems: () => Set[Fil
// We cannot use the tokens generated with renewer yarn. Trying to renew
// those will fail with an access control issue. So create new tokens with
the logged in
// user as renewer.
- sparkConf.get(PRINCIPAL).flatMap { renewer =>
+ val user = sparkConf.get(KERBEROS_RENEWAL_CREDENTIALS) match {
+ case "keytab" => sparkConf.get(PRINCIPAL)
Review comment:
I guess.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
