Security Auth Kerberos Section

Key	Default	Type	Description

security.kerberos.access.hadoopFileSystems

| (none) | List<String> | A semicolon-separated list of Kerberos-secured Hadoop filesystems Flink is going to access. For example, security.kerberos.access.hadoopFileSystems=hdfs://namenode2:9002;hdfs://namenode3:9003. The JobManager needs to have access to these filesystems to retrieve the security tokens. | |

security.kerberos.login.contexts

| (none) | String | A comma-separated list of login contexts to provide the Kerberos credentials to (for example, Client,KafkaClient to use the credentials for ZooKeeper authentication and for Kafka authentication) | |

security.kerberos.login.keytab

| (none) | String | Absolute path to a Kerberos keytab file that contains the user credentials. | |

security.kerberos.login.principal

| (none) | String | Kerberos principal name associated with the keytab. | |

security.kerberos.login.use-ticket-cache

| true | Boolean | Indicates whether to read from your Kerberos ticket cache. | |

security.kerberos.relogin.period

| 1 min | Duration | The time period when keytab login happens automatically in order to always have a valid TGT. |