Flink-1.13 on Yarn Kerberos HDFS Delegation Token 7天失效问题。

我用的Flink-1.13,任务以PerJobCluster模式跑在Yarn上,Yarn使用kerberos做认证,现在任务跑7天Delegation Token过期不能做checkpoint。

conf/flink-conf.yaml中也添加了配置:

security.kerberos.login.keytab: /home/hadoop/xxxx.keytab
security.kerberos.login.principal: xxxx

提交任务可以看到日志:

Login successful for user xxxx using keytab file /home/hadoop/xxxx.keytab
Adding keytab /home/hadoop/xxxx.keytab to the AM container local resource bucket
Adding delegation token to the AM container.
Created token for xxxx: HDFS_DELEGATION_TOKEN owner=xxxx@HADOOP.COM, renewer=hadoop, realUser=, issueDate=1628216155204, maxDate=1628820955204, sequenceNumber=3671882, masterKeyId=758 on ha-hdfs:hdp310001

报错内容:

RemoteException: token (token for xxxx: HDFS_DELEGATION_TOKEN owner=xxxx@HADOOP.COM, renewer=hadoop, realUser=, issueDate=1627557610943, maxDate=1628162410943, sequenceNumber=3564947, masterKeyId=750) can't be found in cache

请问大神们怎么解决。

阅读 3.3k
撰写回答
你尚未登录,登录后可以
  • 和开发者交流问题的细节
  • 关注并接收问题和回答的更新提醒
  • 参与内容的编辑和改进,让解决方法与时俱进
宣传栏