Add support for Hive delegation token renewer principal configuration.

This patch introduces a new configuration option, security.delegation.tokens.hive.renewer, that allows specifying the principal under which Hive delegation tokens will be renewed.
arenadata · Sep 9, 2024 · d39d38c · d39d38c
1 parent 2b000a3
commit d39d38c
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 11 deletions.
diff --git a/...c/main/java/org/apache/flink/table/security/token/HiveServer2DelegationTokenProvider.java b/...c/main/java/org/apache/flink/table/security/token/HiveServer2DelegationTokenProvider.java
@@ -18,8 +18,6 @@
 
 package org.apache.flink.table.security.token;
 
-import org.apache.commons.lang3.StringUtils;
-
 import org.apache.flink.annotation.Internal;
 import org.apache.flink.annotation.VisibleForTesting;
 import org.apache.flink.configuration.Configuration;
@@ -31,6 +29,7 @@
 import org.apache.flink.util.FlinkRuntimeException;
 import org.apache.flink.util.Preconditions;
 
+import org.apache.commons.lang3.StringUtils;
 import org.apache.hadoop.hive.conf.HiveConf;
 import org.apache.hadoop.hive.ql.metadata.Hive;
 import org.apache.hadoop.security.Credentials;
@@ -70,8 +69,8 @@ public String serviceName() {
     public void init(Configuration configuration) throws Exception {
         hiveConf = getHiveConfiguration(configuration);
         kerberosLoginProvider = new KerberosLoginProvider(configuration);
-        hiveTokenRenewerPrincipal = configuration
-                .get(SecurityOptions.DELEGATION_TOKENS_HIVE_RENEWER, "");
+        hiveTokenRenewerPrincipal =
+                configuration.get(SecurityOptions.DELEGATION_TOKENS_HIVE_RENEWER, "");
     }
 
     private org.apache.hadoop.conf.Configuration getHiveConfiguration(Configuration conf) {
@@ -143,11 +142,11 @@ public ObtainedDelegationTokens obtainDelegationTokens() throws Exception {
                             try {
                                 LOG.info("Obtaining Kerberos security token for HiveServer2");
 
-                                String principal = !StringUtils.isEmpty(hiveTokenRenewerPrincipal) ?
-                                        hiveTokenRenewerPrincipal :
-                                        hiveConf.getTrimmed(
-                                                "hive.metastore.kerberos.principal",
-                                                "");
+                                String principal =
+                                        !StringUtils.isEmpty(hiveTokenRenewerPrincipal)
+                                                ? hiveTokenRenewerPrincipal
+                                                : hiveConf.getTrimmed(
+                                                        "hive.metastore.kerberos.principal", "");
 
                                 String tokenStr =
                                         hive.getDelegationToken(

diff --git a/flink-core/src/main/java/org/apache/flink/configuration/SecurityOptions.java b/flink-core/src/main/java/org/apache/flink/configuration/SecurityOptions.java
@@ -220,8 +220,9 @@ public class SecurityOptions {
             key("security.delegation.tokens.hive.renewer")
                     .stringType()
                     .noDefaultValue()
-                    .withDescription("Specifies the principal under which the delegation tokens "
-                            + "for Hive will be renewed.");
+                    .withDescription(
+                            "Specifies the principal under which the delegation tokens "
+                                    + "for Hive will be renewed.");
 
     /**
      * Returns a view over the given configuration via which options can be set/retrieved for the