Hi G Thanks for your quick reply. I think reserving the config of *security.kerberos.fetch.delegation-token* and simplifying disable the token fetching is a good idea.By the way, maybe this should be added in the migration plan or intergation section in the FLIP-211.
Besides, I have a question that the KDC will collapse when the cluster reached 200 nodes you described in the google doc. Do you have any attachment or reference to prove it? Because in our internal per-cluster, the nodes reaches > 1000 and KDC looks good. Do i missed or misunderstood something? Please correct me. Best JunFan. On Jan 13, 2022, 5:26 PM +0800, dev@flink.apache.org, wrote: > > https://docs.google.com/document/d/1JzMbQ1pCJsLVz8yHrCxroYMRP2GwGwvacLrGyaIx5Yc/edit?fbclid=IwAR0vfeJvAbEUSzHQAAJfnWTaX46L6o7LyXhMfBUCcPrNi-uXNgoOaI8PMDQ