zuston commented on a change in pull request #15131:
URL: https://github.com/apache/flink/pull/15131#discussion_r598042163
##########
File path:
flink-yarn/src/main/java/org/apache/flink/yarn/configuration/YarnConfigOptions.java
##########
@@ -344,6 +344,13 @@
.withDescription(
"A comma-separated list of additional
Kerberos-secured Hadoop filesystems Flink is going to access. For example,
yarn.security.kerberos.additionalFileSystems=hdfs://namenode2:9002,hdfs://namenode3:9003.
The client submitting to YARN needs to have access to these file systems to
retrieve the security tokens.");
+ public static final ConfigOption<Boolean> YARN_SECURITY_ENABLED =
Review comment:
Hadoop delegation token is used to access to HDFS/HBase/Hive service. So
when you want to be interactive with HDFS, you will need it.
Two options can be used to access above services.
First is to fetch delegation token using Keytab.
Second is to get it from current ugi, if current ugi has the delegation
token which is already existing and can be reused.
Refer to: https://blog.cloudera.com/hadoop-delegation-tokens-explained/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
