flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eron Wright (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FLINK-7860) Support YARN proxy user in Flink (impersonation)
Date Thu, 04 Jan 2018 03:25:00 GMT

    [ https://issues.apache.org/jira/browse/FLINK-7860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310669#comment-16310669

Eron Wright  commented on FLINK-7860:

I think you're overstating what Hadoop does.   The proxy user functionality in particular
is intended for high-privilege processes like the Yarn RM, but doesn't support running low-privilege
code in that same process.  It is just meant to establish an effective user for RPC purposes.

The super service will need to access the service account ('joe') keytab to be able to deploy
a Flink cluster that uses it.   I see no other way.   Maybe I'm missing something about your

> Support YARN proxy user in Flink (impersonation)
> ------------------------------------------------
>                 Key: FLINK-7860
>                 URL: https://issues.apache.org/jira/browse/FLINK-7860
>             Project: Flink
>          Issue Type: New Feature
>          Components: YARN
>            Reporter: Shuyi Chen
>            Assignee: Shuyi Chen

This message was sent by Atlassian JIRA

View raw message