Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-12130

Apply command line options to configuration before installing security modules

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Command Line Client
    • Labels:
      None

      Description

      Currently if the user configures Kerberos credentials through command line, it won't work.

      // flink run -m yarn-cluster -yD security.kerberos.login.keytab=/path/to/keytab -yD security.kerberos.login.principal=xxx /path/to/test.jar
      

      Above command would cause security failure if you do not have a ticket cache w/ kinit.

      Maybe we could call org.apache.flink.client.cli.AbstractCustomCommandLine#applyCommandLineOptionsToConfiguration  before SecurityUtils.install(new SecurityConfiguration(cli.configuration));

      Here is a demo patch: https://github.com/jiasheng55/flink/commit/ef6880dba8a1f36849f5d1bb308405c421b29986

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                victor-wong Victor Wong
                Reporter:
                victor-wong Victor Wong
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated: