CalvinKirs opened a new pull request, #45956: URL: https://github.com/apache/doris/pull/45956
### Background When using an HMS-based Iceberg Catalog, refreshing the Catalog frequently creates new HadoopAuthenticator instances. This leads to the following issues: #### Frequent FileSystem Creation: Iceberg uses Path.getFileSystem(Configuration) to obtain a FileSystem instance. Even though the Configuration remains unchanged, changes in the UserGroupInformation (UGI) cause new FileSystem instances to be created. #### Resource Leakage: ``` Newly created FileSystem instances are not released, leading to increased resource consumption over time. 198: 1978 72712 [Ljava.security.Principal; 244: 2202 52848 javax.security.auth.kerberos.KerberosPrincipal 418: 753 24096 sun.security.krb5.PrincipalName 717: 391 9384 com.sun.security.auth.UnixNumericGroupPrincipal 940: 382 6112 com.sun.security.auth.UnixNumericUserPrincipal ``` #### Root Cause Each Catalog refresh creates a new HadoopAuthenticator instance. Changes in the UGI contained in HadoopAuthenticator lead to the creation of new FileSystem instances, even when the Configuration is the same. Related PR: #xxx Problem Summary: ### Release note None ### Check List (For Author) - Test <!-- At least one of them must be included. --> - [ ] Regression test - [ ] Unit Test - [ ] Manual test (add detailed scripts or steps below) - [ ] No need to test or manual test. Explain why: - [ ] This is a refactor/code format and no logic has been changed. - [ ] Previous test can cover this change. - [ ] No code files have been changed. - [ ] Other reason <!-- Add your reason? --> - Behavior changed: - [ ] No. - [ ] Yes. <!-- Explain the behavior change --> - Does this need documentation? - [ ] No. - [ ] Yes. <!-- Add document PR link here. eg: https://github.com/apache/doris-website/pull/1214 --> ### Check List (For Reviewer who merge this PR) - [ ] Confirm the release note - [ ] Confirm test cases - [ ] Confirm document - [ ] Add branch pick label <!-- Add branch pick label that this PR should merge into --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org For additional commands, e-mail: commits-h...@doris.apache.org