flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eron Wright (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FLINK-7860) Support YARN proxy user in Flink (impersonation)
Date Thu, 04 Jan 2018 03:25:00 GMT

    [ https://issues.apache.org/jira/browse/FLINK-7860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310669#comment-16310669
] 

Eron Wright  commented on FLINK-7860:
-------------------------------------

I think you're overstating what Hadoop does.   The proxy user functionality in particular
is intended for high-privilege processes like the Yarn RM, but doesn't support running low-privilege
code in that same process.  It is just meant to establish an effective user for RPC purposes.

The super service will need to access the service account ('joe') keytab to be able to deploy
a Flink cluster that uses it.   I see no other way.   Maybe I'm missing something about your
proposal.



> Support YARN proxy user in Flink (impersonation)
> ------------------------------------------------
>
>                 Key: FLINK-7860
>                 URL: https://issues.apache.org/jira/browse/FLINK-7860
>             Project: Flink
>          Issue Type: New Feature
>          Components: YARN
>            Reporter: Shuyi Chen
>            Assignee: Shuyi Chen
>




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message