[
https://issues.apache.org/jira/browse/FLINK-7860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310598#comment-16310598
]
Eron Wright commented on FLINK-7860:
-------------------------------------
If I understand correctly, your scenario is as follows. You have a job
submission service that launches Flink jobs into YARN. You'd like the Flink
CLI to authenticate to YARN using a super account ('flink') but impersonating a
user ('joe'). You'd like the AM to run as 'joe' and to use 'joe.keytab' to
authenticate to HDFS during job execution.
Why not run the Flink CLI using joe.keytab? I don't see the need to use a
super account here. Keep in mind that the CLI also executes Joe's code (to
construct a job graph) and thus might grab your super account keytab.
> Support YARN proxy user in Flink (impersonation)
> ------------------------------------------------
>
> Key: FLINK-7860
> URL: https://issues.apache.org/jira/browse/FLINK-7860
> Project: Flink
> Issue Type: New Feature
> Components: YARN
> Reporter: Shuyi Chen
> Assignee: Shuyi Chen
>
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
