[HADOOP-17050] S3A to support additional token issuers

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.3.1
• Component/s: fs/s3
• Target Version/s: 3.3.1
• Assignee: Steve Loughran
• Reporter: Gabor Bota
• Created: 20/May/20 11:21
• Updated: 24/Jun/20 13:50
• Resolved: 24/Jun/20 13:50

Description

In org.apache.hadoop.fs.s3a.auth.delegation.AbstractDelegationTokenBinding the createDelegationToken should return a list of tokens.
With this functionality, the AbstractDelegationTokenBinding can get two different tokens at the same time.
AbstractDelegationTokenBinding.TokenSecretManager should be extended to retrieve secrets and lookup delegation tokens (use the public API for secretmanager in hadoop)

Issue Links

• relates to: HADOOP-17077 S3A delegation token binding to support secondary binding list
• links to: https://github.com/apache/hadoop/pull/2043