Hello !

I have a question related to a shell action in an oozie workflow in a
kerberized cluster.

I found something about this in the oozie doc for java action :

*###IMPORTANT:* In order for a Java action to succeed on a secure cluster,
it must propagate the
Hadoop delegation token like in the following code snippet (this is benign
on non-secure clusters):

// propagate delegation related props from launcher job to MR job
if (System.getenv("HADOOP_TOKEN_FILE_LOCATION") != null) {
    jobConf.set("mapreduce.job.credentials.binary",
System.getenv("HADOOP_TOKEN_FILE_LOCATION"));
}

###

https://oozie.apache.org/docs/4.2.0/WorkflowFunctionalSpec.html

But is it possible to use the HADOOP_TOKEN_FILE_LOCATION in a shell action
? In order to not do a kinit with a keytab ?

BR.

Morgrim.

Reply via email to