Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-12130

Apply command line options to configuration before installing security modules

    XMLWordPrintableJSON

Details

    Description

      Currently if the user configures Kerberos credentials through command line, it won't work.

      // flink run -m yarn-cluster -yD security.kerberos.login.keytab=/path/to/keytab -yD security.kerberos.login.principal=xxx /path/to/test.jar

      Above command would cause security failure if you do not have a ticket cache w/ kinit.

      Maybe we could call org.apache.flink.client.cli.AbstractCustomCommandLine#applyCommandLineOptionsToConfiguration  before SecurityUtils.install(new SecurityConfiguration(cli.configuration));

      Here is a demo patch: https://github.com/jiasheng55/flink/commit/ef6880dba8a1f36849f5d1bb308405c421b29986

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. FLINK-12124 Security is not support dynamicProperties

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. FLINK-29362 Allow loading dynamic config for kerberos authentication in CliFrontend

          • Major - Major loss of function.
          • Closed
          links to

          Web Link GitHub Pull Request #14271

          Web Link GitHub Pull Request #21275

          Web Link GitHub Pull Request #21276

          Web Link https://github.com/apache/flink/pull/8166

          Activity

            People

              Unassigned Unassigned
              victor-wong jiasheng55
              Votes:
              1 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated: