[FLINK-31932] Allow to configure HA on k8s without using service account

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: Deployment / Kubernetes
• Assignee: Unassigned
• Reporter: Arkadiusz Gasinski
• Created: 25/Apr/23 06:58
• Updated: 25/Apr/23 06:58

Description

I have quite uncommon use case where I'd like to configure job manager's high availability on Kubernetes, but without using a service account, but rather a combination of username and password for interacting with the k8s' API. The company's policy only allows read-only service accounts, and if I want to be able to manipulate k8s objects (e.g., ConfigMap creation/modification) I need to have a dedicated account with username/password authentication. I have such an account, but I wasn't yet able to configure Flink's HA with it. Any advise greatly appreciated. Our k8s provider is OpenShift 4.x.