ach cache is
> asynchronously refreshed periodically by making calls to Sentry, currently
> via master. However, with delegation tokens, we'd want to reduce this load
> from the master to a dedicated service inside YARN (which is also used for
> other such "system" operations during pr
Service. Hence the need for this extra hop.
About the cache - individual program containers maintain a cache per
container. Cache entries individually have a TTL. Each cache is
asynchronously refreshed periodically by making calls to Sentry, currently
via master. However, with delegation tokens, we'd
Thanks for bringing this up Bhooshan!
Apache Sentry does not support delegation tokens yet. Looking at your use
case, it seems like cache with strong (near strong) freshness guarantees is
the key requirement here. Sentry does plan to support a way to store delta
changes and serve these deltas
Hi Folks,
Any thoughts?
-
Bhooshan
On Sat, Jul 30, 2016 at 8:33 AM, Bhooshan Mogal <bhooshan.mo...@gmail.com>
wrote:
> Hi,
>
> Does the Sentry Service provide delegation tokens for processes without
> Kerberos credentials to communicate with it (from YARN containers).
>
