[FLINK-5839] Flink Security problem collection

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Done
• Component/s: Runtime / Coordination
• Assignee: Unassigned
• Reporter: shijinkui
• Created: 18/Feb/17 03:49
• Updated: 27/Sep/19 10:09
• Resolved: 27/Sep/19 10:09

Description

This issue collect some security problem found in huawei's use case.

Sub-Tasks

• change checkpoint dir permission to 700 for security reason: Closed
• configure the explicit Unit Test file suffix: Closed
• java.io.tmpdir setted as project build directory in surefire plugin: Closed
• Port-range for the web interface via YARN: Closed
• 'zookeeper.sasl.disable' not takes effet when starting CuratorFramework: Closed
• reuse zookeeer client created by CuratorFramework: Resolved
• Do not use yarn client config to do sanity check: Closed
• Introduce a leader election service in yarn mode to make JobManager always available: Closed
• Blob Server cannot handle multiple job submits (with same content) parallelly: Resolved
• SSL version and ciper suites cannot be constrained as configured: Closed
• make env.java.opts.jobmanager and env.java.opts.taskmanager working in YARN mode: Resolved
• taskmanager.numberOfTaskSlots and yarn.containers.vcores did not work well in YARN mode: Resolved
• In yarn mode, a small pic can not be loaded: Closed
• add hostname option in SocketWindowWordCount example to be more convenient: Closed
• Use "Used" instead of "Initial" to make taskmanager tag more readable: Closed
• Fix the wrong config file name: Closed
• support custom header settings of allow origin: Closed