flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Paul Lin (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (FLINK-11126) Filter out AMRMToken in the TaskManager credentials
Date Tue, 30 Apr 2019 10:15:00 GMT

     [ https://issues.apache.org/jira/browse/FLINK-11126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Paul Lin updated FLINK-11126:
-----------------------------
    Affects Version/s: 1.6.4
                       1.7.2
                       1.8.0

> Filter out AMRMToken in the TaskManager credentials
> ---------------------------------------------------
>
>                 Key: FLINK-11126
>                 URL: https://issues.apache.org/jira/browse/FLINK-11126
>             Project: Flink
>          Issue Type: Improvement
>          Components: Deployment / YARN
>    Affects Versions: 1.6.2, 1.6.4, 1.7.0, 1.7.2, 1.8.0
>            Reporter: Paul Lin
>            Assignee: Paul Lin
>            Priority: Minor
>              Labels: pull-request-available
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> Currently, Flink JobManager propagates its storage tokens to TaskManager to meet the
requirement of YARN log aggregation (see FLINK-6376). But in this way the AMRMToken is also
included in the TaskManager credentials, which could be potentially insecure. We should
filter out AMRMToken before setting the tokens to TaskManager's container launch context.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message