Page History

...

The MasterKey/secret is used to generate and verify delegation tokens. This is supplied using config option. Same secret key must be configured across all the brokers. The current proposal does not support rotation of secret. If  If the secret is not set or set to empty string, brokers will disable the delegation token support. 

The current proposal does not support rotation of secret.

Procedure to manually rotate the secret:

We require a re-deployment when the secret needs to be rotated.

• expire all existing tokens
•  rotate the secret, and
• generate new tokens

Token acquisition

Following steps describe how tokens can be acquired:

...