flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eron Wright (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FLINK-7860) Support YARN proxy user in Flink (impersonation)
Date Thu, 04 Jan 2018 01:53:00 GMT

    [ https://issues.apache.org/jira/browse/FLINK-7860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310598#comment-16310598
] 

Eron Wright  commented on FLINK-7860:
-------------------------------------

If I understand correctly, your scenario is as follows.   You have a job submission service
that launches Flink jobs into YARN.  You'd like the Flink CLI to authenticate to YARN using
a super account ('flink') but impersonating a user ('joe').  You'd like the AM to run as 'joe'
and to use 'joe.keytab' to authenticate to HDFS during job execution.

Why not run the Flink CLI using joe.keytab?   I don't see the need to use a super account
here.  Keep in mind that the CLI also executes Joe's code (to construct a job graph) and thus
might grab your super account keytab.

> Support YARN proxy user in Flink (impersonation)
> ------------------------------------------------
>
>                 Key: FLINK-7860
>                 URL: https://issues.apache.org/jira/browse/FLINK-7860
>             Project: Flink
>          Issue Type: New Feature
>          Components: YARN
>            Reporter: Shuyi Chen
>            Assignee: Shuyi Chen
>




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message