Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-11126

Filter out AMRMToken in the TaskManager credentials

    XMLWordPrintableJSON

    Details

      Description

      Currently, Flink JobManager propagates its storage tokens to TaskManager to meet the requirement of YARN log aggregation (see FLINK-6376). But in this way the AMRMToken is also included in the TaskManager credentials, which could be potentially insecure. We should filter out AMRMToken before setting the tokens to TaskManager's container launch context.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Paul Lin Paul Lin
                Reporter:
                Paul Lin Paul Lin
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h
                  1h