[
https://issues.apache.org/jira/browse/FLINK-7860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310669#comment-16310669
]
Eron Wright commented on FLINK-7860:
-------------------------------------
I think you're overstating what Hadoop does. The proxy user functionality in
particular is intended for high-privilege processes like the Yarn RM, but
doesn't support running low-privilege code in that same process. It is just
meant to establish an effective user for RPC purposes.
The super service will need to access the service account ('joe') keytab to be
able to deploy a Flink cluster that uses it. I see no other way. Maybe I'm
missing something about your proposal.
> Support YARN proxy user in Flink (impersonation)
> ------------------------------------------------
>
> Key: FLINK-7860
> URL: https://issues.apache.org/jira/browse/FLINK-7860
> Project: Flink
> Issue Type: New Feature
> Components: YARN
> Reporter: Shuyi Chen
> Assignee: Shuyi Chen
>
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
