[
https://issues.apache.org/jira/browse/FLINK-7860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310583#comment-16310583
]
Shuyi Chen commented on FLINK-7860:
-----------------------------------
Using the HADOOP_PROXY_USER env variable would be good for command line client
submission, but if we have a super service to programmatically submit jobs on
behalf of users, switching the env variable for different users would require
extra locking to make sure that the setting of the global HADOOP_PROXY_USER
variable and submitting job are atomic. Adding a configuration would easily
solve the issue, as it's local.
I think we can support both HADOOP_PROXY_USER (similar to [HIVE-15579 |
https://issues.apache.org/jira/browse/HIVE-15579]) and an extra proxy user
configuration, and the extra configuration take precedence.
Also, we still need an extra configuration to specify the keytab path for the
proxy user.
> Support YARN proxy user in Flink (impersonation)
> ------------------------------------------------
>
> Key: FLINK-7860
> URL: https://issues.apache.org/jira/browse/FLINK-7860
> Project: Flink
> Issue Type: New Feature
> Components: YARN
> Reporter: Shuyi Chen
> Assignee: Shuyi Chen
>
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
