Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-5581

Improve Kerberos security related documentation

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.3.0, 1.2.1
    • Component/s: Documentation, Security
    • Labels:
      None

      Description

      The information between

      is not completely consistent with each other, and could probably be improved.

      Also, we should add Kerberos settings specific to components in their respective documentations (ex. specifically have a kerberos section in the Kafka connector documentation, to let users access the info easier.)

        Issue Links

          Activity

          Hide
          githubbot ASF GitHub Bot added a comment -

          GitHub user tzulitai opened a pull request:

          https://github.com/apache/flink/pull/3181

          FLINK-5581 [doc] Improve user accessibility for Kerberos-related documentation

          The goal of this PR is to organize Kerberos related information as so:

          1. `flink-conf.yaml` configuration for Kerberos security is consolidated in `/setup/config.html#kerberos-based-security`
          2. Internals on how Flink security works consolidated in `/ops/security-kerberos.html`
          3. Connector / component specific configuration (e.g. Kafka, Zookeeper for HA) to authenticate with Kerberos located in their own respective documentation.

          In the above documents, instead of duplicate info which may be hard / easily forgotten to be synced, simply use links to reference one another.

          You can merge this pull request into a Git repository by running:

          $ git pull https://github.com/tzulitai/flink FLINK-5581

          Alternatively you can review and apply these changes as the patch at:

          https://github.com/apache/flink/pull/3181.patch

          To close this pull request, make a commit to your master/trunk branch
          with (at least) the following in the commit message:

          This closes #3181


          commit c624fe34119d11cca7ec29c08e482c1ba0498671
          Author: Tzu-Li (Gordon) Tai <tzulitai@apache.org>
          Date: 2017-01-20T15:05:45Z

          FLINK-5581 [doc] Improve user accessibility for Kerberos-related documentation


          Show
          githubbot ASF GitHub Bot added a comment - GitHub user tzulitai opened a pull request: https://github.com/apache/flink/pull/3181 FLINK-5581 [doc] Improve user accessibility for Kerberos-related documentation The goal of this PR is to organize Kerberos related information as so: 1. `flink-conf.yaml` configuration for Kerberos security is consolidated in `/setup/config.html#kerberos-based-security` 2. Internals on how Flink security works consolidated in `/ops/security-kerberos.html` 3. Connector / component specific configuration (e.g. Kafka, Zookeeper for HA) to authenticate with Kerberos located in their own respective documentation. In the above documents, instead of duplicate info which may be hard / easily forgotten to be synced, simply use links to reference one another. You can merge this pull request into a Git repository by running: $ git pull https://github.com/tzulitai/flink FLINK-5581 Alternatively you can review and apply these changes as the patch at: https://github.com/apache/flink/pull/3181.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #3181 commit c624fe34119d11cca7ec29c08e482c1ba0498671 Author: Tzu-Li (Gordon) Tai <tzulitai@apache.org> Date: 2017-01-20T15:05:45Z FLINK-5581 [doc] Improve user accessibility for Kerberos-related documentation
          Hide
          githubbot ASF GitHub Bot added a comment -

          Github user StephanEwen commented on the issue:

          https://github.com/apache/flink/pull/3181

          Thanks for updating the Kerberos docs!
          Looking though this right now...

          Show
          githubbot ASF GitHub Bot added a comment - Github user StephanEwen commented on the issue: https://github.com/apache/flink/pull/3181 Thanks for updating the Kerberos docs! Looking though this right now...
          Hide
          githubbot ASF GitHub Bot added a comment -

          Github user StephanEwen commented on the issue:

          https://github.com/apache/flink/pull/3181

          Looks good, thanks!

          Merging this for `master` and `release-1.2`...

          Show
          githubbot ASF GitHub Bot added a comment - Github user StephanEwen commented on the issue: https://github.com/apache/flink/pull/3181 Looks good, thanks! Merging this for `master` and `release-1.2`...
          Hide
          githubbot ASF GitHub Bot added a comment -

          Github user asfgit closed the pull request at:

          https://github.com/apache/flink/pull/3181

          Show
          githubbot ASF GitHub Bot added a comment - Github user asfgit closed the pull request at: https://github.com/apache/flink/pull/3181
          Hide
          StephanEwen Stephan Ewen added a comment -

          Fixed in

          • 1.2.1 via a5ee4a0299332b46d5a4b1c9aa5bb05bcb1d5f8d
          • 1.3.0 via a459b0b3bde62daabb56939d7ba6f2c8a69a2226
          Show
          StephanEwen Stephan Ewen added a comment - Fixed in 1.2.1 via a5ee4a0299332b46d5a4b1c9aa5bb05bcb1d5f8d 1.3.0 via a459b0b3bde62daabb56939d7ba6f2c8a69a2226

            People

            • Assignee:
              tzulitai Tzu-Li (Gordon) Tai
              Reporter:
              tzulitai Tzu-Li (Gordon) Tai
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development