Flink-1.13 on Yarn Kerberos HDFS Delegation Token 7天失效问题。

Question

我用的Flink-1.13，任务以PerJobCluster模式跑在Yarn上，Yarn使用kerberos做认证，现在任务跑7天Delegation Token过期不能做checkpoint。

conf/flink-conf.yaml中也添加了配置：

security.kerberos.login.keytab: /home/hadoop/xxxx.keytab
security.kerberos.login.principal: xxxx

提交任务可以看到日志：

Login successful for user xxxx using keytab file /home/hadoop/xxxx.keytab
Adding keytab /home/hadoop/xxxx.keytab to the AM container local resource bucket
Adding delegation token to the AM container.
Created token for xxxx: HDFS_DELEGATION_TOKEN owner=xxxx@HADOOP.COM, renewer=hadoop, realUser=, issueDate=1628216155204, maxDate=1628820955204, sequenceNumber=3671882, masterKeyId=758 on ha-hdfs:hdp310001

报错内容：

RemoteException: token (token for xxxx: HDFS_DELEGATION_TOKEN owner=xxxx@HADOOP.COM, renewer=hadoop, realUser=, issueDate=1627557610943, maxDate=1628162410943, sequenceNumber=3564947, masterKeyId=750) can't be found in cache

请问大神们怎么解决。