[FLINK-31321] Yarn-session mode, securityConfiguration supports dynamic configuration

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.17.0
• Fix Version/s: 1.17.0
• Component/s: Deployment / YARN
• Labels: pull-request-available
• Assignee: felixzh
• Reporter: felixzh
• Created: 04/Mar/23 03:46
• Updated: 17/Mar/23 02:04
• Resolved: 17/Mar/23 02:04

Description

when different tenants submit jobs using the same flink-conf.yaml, the same user is displayed on the Yarn page.
SecurityConfiguration does not support dynamic configuration. Therefore, the user displayed on the Yarn page is the security.kerberos.login.principal in the flink-conf.yaml.

FLINK-29435 only fixed CliFrontend class(Corresponds to flink script).

FlinkYarnSessionCli class(Corresponds to yarn-session.sh script) still exists this question.

Issue Links

• links to: GitHub Pull Request #22119