[FLINK-5949] Flink on YARN checks for Kerberos credentials for non-Kerberos authentication methods

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 1.2.1, 1.3.0
• Component/s: Deployment / YARN
• Assignee: Tzu-Li (Gordon) Tai
• Reporter: Tzu-Li (Gordon) Tai
• Created: 02/Mar/17 06:14
• Updated: 28/Feb/19 11:31
• Resolved: 14/Mar/17 17:23

Description

Reported in ML: http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/Flink-Yarn-and-MapR-Kerberos-issue-td11996.html

The problem is that the Flink on YARN client incorrectly assumes UserGroupInformation.isSecurityEnabled() returns true only for Kerberos authentication modes, whereas it actually returns true for other kinds of authentications too.

We could make use of UserGroupInformation.getAuthenticationMethod() to check for KERBEROS only.

Issue Links

• links to: GitHub Pull Request #3528