link3280 commented on a change in pull request #7895:
[FLINK-11126][YARN][security] Filter out AMRMToken in TaskManager‘s credentials
URL: https://github.com/apache/flink/pull/7895#discussion_r287555489
##########
File path: flink-yarn/src/main/java/org/apache/flink/yarn/Utils.java
##########
@@ -80,6 +80,9 @@
/** Yarn site xml file name populated in YARN container for secure IT
run. */
public static final String YARN_SITE_FILE_NAME = "yarn-site.xml";
+ /** AM RM delegation token name populated in YARN container. */
+ public static final String AM_RM_TOKEN_NAME = "YARN_AM_RM_TOKEN";
Review comment:
The token kind is public evolving, and it has been like this since Hadoop
2.1 (see https://issues.apache.org/jira/browse/YARN-822).
I've verified that it's still available on Hadoop 3.1 (
https://github.com/apache/hadoop/blob/55e0c134f002f74cb4a0360b6682a1b6796d1598/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-common/src/main/java/org/apache/hadoop/yarn/security/AMRMTokenIdentifier.java#L57).
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
With regards,
Apache Git Services
