stackoverflow上有两篇比较好的回答java - Should I call ugi.checkTGTAndReloginFromKeytab() before every action on hadoop? - Stack OverflowHBase Kerberos connection renewal strategy - Stack Overflow另外cloudera的官方文档上也有一些说明,但很简陋Configuring the HBase Client TGT Renewal PeriodConfiguring Spark on YARN for Long-Running Applications