[FLINK-3929] Support for Kerberos Authentication with Keytab Credential

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Component/s: Runtime / Coordination
• Labels: kerberos security
• Assignee: Vijay Srinivasaraghavan
• Reporter: Eron Wright
• Created: 18/May/16 19:06
• Updated: 12/Jan/20 13:54
• Resolved: 20/Sep/16 20:14

Description

This issue is part of a series of improvements detailed in the Secure Data Access design doc.

Add support for a keytab credential to be associated with the Flink cluster, to facilitate:

• Kerberos-authenticated data access for connectors
• Kerberos-authenticated ZooKeeper access

Support both the standalone and YARN deployment modes.

Issue Links

• blocks: FLINK-3932 Implement State Backend Security
• incorporates: FLINK-4826 Add keytab based kerberos support for Mesos environment
• incorporates: FLINK-3670 Kerberos: Improving long-running streaming jobs
• is related to: FLINK-3239 Support for Kerberos enabled Kafka 0.9.0.0
• is required by: FLINK-3239 Support for Kerberos enabled Kafka 0.9.0.0
• is required by: FLINK-3670 Kerberos: Improving long-running streaming jobs
• links to: GitHub Pull Request #2275