Hi, Kien, Do you config the "security.kerberos.login.principal" and the "security.kerberos.login.keytab" together? If you only set the keytab, it will not take effect.
Best, Yangze Guo On Tue, Nov 17, 2020 at 3:03 PM Kien Truong <duckientru...@gmail.com> wrote: > > Hi all, > > We are having an issue where Flink Application Master is unable to > automatically restart Flink job after its delegation token has expired. > > We are using Flink 1.11 with YARN 3.1.1 in single job per yarn-cluster mode. > We have also add valid keytab configuration and taskmanagers are able to > login with keytabs correctly. However, it seems YARN Application Master still > use delegation tokens instead of the keytab. > > Any idea how to resolve this would be much appreciated. > > Thanks > Kien > > > >