[ 
https://issues.apache.org/jira/browse/FLINK-12130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17576481#comment-17576481
 ] 

Zhanghao Chen commented on FLINK-12130:
---------------------------------------

Hi, [~aljoscha], we also need this feature in our company, and I'd be willing 
to pick up from where jiasheng left to push this forward. I plan to prepare a 
new PR, following on exactly the same route as jiasheng did in 
[[FLINK-12130][clients] Apply command line options to configuration be… by 
jiasheng55 · Pull Request #14271 · apache/flink 
(github.com)|https://github.com/apache/flink/pull/14271]. If you think it is on 
the correct path, could you assign this ticket to me?

> Apply command line options to configuration before installing security modules
> ------------------------------------------------------------------------------
>
>                 Key: FLINK-12130
>                 URL: https://issues.apache.org/jira/browse/FLINK-12130
>             Project: Flink
>          Issue Type: Improvement
>          Components: Command Line Client
>            Reporter: jiasheng55
>            Priority: Not a Priority
>              Labels: auto-deprioritized-major, auto-deprioritized-minor, 
> auto-unassigned, pull-request-available
>
> Currently if the user configures Kerberos credentials through command line, 
> it won't work.
> {code:java}
> // flink run -m yarn-cluster -yD 
> security.kerberos.login.keytab=/path/to/keytab -yD 
> security.kerberos.login.principal=xxx /path/to/test.jar
> {code}
> Above command would cause security failure if you do not have a ticket cache 
> w/ kinit.
> Maybe we could call 
> _org.apache.flink.client.cli.AbstractCustomCommandLine#applyCommandLineOptionsToConfiguration_
>   before _SecurityUtils.install(new 
> SecurityConfiguration(cli.configuration));_
> Here is a demo patch: 
> [https://github.com/jiasheng55/flink/commit/ef6880dba8a1f36849f5d1bb308405c421b29986]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to