aljoscha commented on a change in pull request #7702:
[FLINK-11088][Security][YARN] Allow YARN to discover pre-installed keytab files
URL: https://github.com/apache/flink/pull/7702#discussion_r377551273
##########
File path:
flink-yarn/src/main/java/org/apache/flink/yarn/configuration/YarnConfigOptions.java
##########
@@ -225,6 +226,22 @@
.noDefaultValue()
.withDescription("Specify YARN node label for
the YARN application.");
+ public static final ConfigOption<Boolean> REQUIRE_LOCALIZE_KEYTAB =
+ key("yarn.security.kerberos.require.localize.keytab")
+ .defaultValue(Utils.DEFAULT_KEYTAB_LOCALIZE_STATE)
+ .withDescription("With this configuration option, user
can specify whether to submit the kerberos keytab" +
+ " file used on the client side as a localize
resource. If set to true, Flink will upload the the keytab" +
+ " file configured in
SecurityOption('security.kerberos.login.keytab') to YARN's container localize" +
+ " resource bucket with the specified relative
path defined in 'yarn.security.kerberos.keytab.path'.");
+
+ public static final ConfigOption<String> LOCALIZED_KEYTAB_PATH =
+ key("yarn.security.kerberos.keytab.path")
Review comment:
To be more in line with existing keytab options this could be simplified to
`yarn.security.kerberos.keytab`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
