[FLINK-31335] using sql-gateway to submit job to yarn cluster, sql-gateway don't support kerberos

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.16.0
• Fix Version/s: 1.17.3
• Component/s: Table SQL / Gateway
• Labels: pull-request-available stale-assigned
• Assignee: felixzh
• Reporter: felixzh
• Created: 06/Mar/23 09:24
• Updated: 28/Nov/23 13:11

Description

when submit job to yarn cluster, sql-gateway don't support kerberos.

1. yarn-per-job mode

-Dexecution.target=yarn-per-job

2. yarn-session mode

-Dexecution.target=yarn-session -Dyarn.application.id=yarnSessionAppID(eg: application_1677479737242_0052)

sql-gateway need to use SecurityUtils Modules.

default use flink-conf.yaml(security.kerberos.login.principal and security.kerberos.login.keytab), also support -Dsecurity.kerberos.login.keytab and -Dsecurity.kerberos.login.principal (eg: 1/2)

Issue Links

• links to: GitHub Pull Request #22118