Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. delegation.token.max.lifetime.sec ms : The token has a maximum lifetime beyond which it cannot be renewed any more. Default value 7 days.

  2. delegation.token.expiry.time.sec ms : The token validity time in seconds before the token needs to be renewed. Default value 1 day.

  3. delegation.token.master.key : Secret/masterKey to generate and verify delegation tokens. This masterKey needs to be configured with all the brokers. If the secret is not set or set to empty string, brokers will disable the delegation token support.

...

The secret is used to generate and verify delegation tokens. This is supplied using config option. This secret needs to be configured with all the brokers. The current proposal does not support rotation of secret. If the secret is not set or set to empty string, brokers will disable the delegation token support. We  require a re-deployment when the secret needs to be rotated.

...