Oracle Cloud Infrastructure Documentation

Regenerating a Resource Principal Token

Regenerate a Big Data Service cluster resource principal tokens from the Resource details page.

Resource principals are automatically refreshed before its expiry. Big Data Service tries to refresh the token after 80% of its lifetime/ttl. For the cases where manual regenerate is needed, Big Data Service supports force refresh of the tokens.

Big Data Service refreshes the token after the existing token passes 80% of it's life span. For example, if the life span is 10 hours, Big Data Service begins to retry by the 8th hours.

Note

  • For automatic renewal and distribution of the tokens to the nodes, Ambari uses bigdata-service-configurator.
  • We recommend using RPST token within cluster nodes for automatic renewal.
  • In case of failures, Big Data Service retries up to three times at 10 minute intervals.

  • Regenerate a resource principal token from the Resource principal details page.

    1. Open the navigation menu and click Analytics & AI. Under Data Lake, click Big Data Service.
    2. Under Compartment, select the compartment that contains the cluster.
    3. In the list of clusters, click the name of the cluster.
    4. On the Cluster details page, click Resource principal, and then click the name of the resource principal.
    5. Click Regenerate resource token.
  • Use the force-refresh-resource-principal command and required parameters to force the refresh of the resource principal for the cluster.
    oci bds instance force-refresh-resource-principal [OPTIONS]

    For a complete list of flags and variable options for CLI commands, see the Command Line Reference for Big Data.

  • Use the operation ForceRefreshResourcePrincipal to force the refresh of a resource principal in a Big Data Service cluster.