[FLINK-11271] Improvement to Kerberos Security

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.11.0
• Component/s: Deployment / YARN
• Assignee: Rong Rong
• Reporter: Rong Rong
• Created: 04/Jan/19 17:41
• Updated: 19/Mar/20 14:41
• Resolved: 19/Mar/20 14:41

Description

This is the master JIRA for the improvement listed in:

https://docs.google.com/document/d/1rBLCpyQKg6Ld2P0DEgv4VIOMTwv4sitd7h7P5r202IE/edit#heading=h.y34f96ctioqk

Sub-Tasks

• Allow pre-install Kerberos authentication keytab discovery on YARN: Closed
• Introduce service provider pattern for user to dynamically load SecurityFactory classes: Closed
• Unify Kerberos credentials checking: Resolved
• Fix YARNSessionFIFOSecuredITCase not loading the correct security context factory: Resolved