[
https://issues.apache.org/jira/browse/FLINK-3929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15503256#comment-15503256
]
ASF GitHub Bot commented on FLINK-3929:
---------------------------------------
Github user mxm commented on a diff in the pull request:
https://github.com/apache/flink/pull/2275#discussion_r79355618
--- Diff:
flink-yarn/src/main/java/org/apache/flink/yarn/cli/FlinkYarnSessionCli.java ---
@@ -460,9 +463,27 @@ public static void runInteractiveCli(YarnClusterClient
yarnCluster, boolean read
}
}
- public static void main(String[] args) {
- FlinkYarnSessionCli cli = new FlinkYarnSessionCli("", ""); //
no prefix for the YARN session
- System.exit(cli.run(args));
+ public static void main(final String[] args) {
+ final FlinkYarnSessionCli cli = new FlinkYarnSessionCli("", "",
true); // no prefix for the YARN session
+
+ String confDirPath =
CliFrontend.getConfigurationDirectoryFromEnv();
+ GlobalConfiguration.loadConfiguration(confDirPath);
+ Configuration flinkConfiguration =
GlobalConfiguration.loadConfiguration();
+
flinkConfiguration.setString(ConfigConstants.FLINK_BASE_DIR_PATH_KEY,
confDirPath);
+ try {
+ SecurityContext.install(new
SecurityContext.SecurityConfiguration().setFlinkConfiguration(flinkConfiguration));
+ int retCode =
SecurityContext.getInstalled().runSecured(new
SecurityContext.FlinkSecuredRunner<Integer>() {
+ @Override
+ public Integer run() {
+ return cli.run(args);
+ }
+ });
+ System.exit(retCode);
+ } catch(Exception e) {
+ e.printStackTrace();
+ LOG.error("Exception Occured. Reason: {}", e);
--- End diff --
The signature is `error(String msg, Throwable t)`. You can remove the
"Reason: {}".
> Support for Kerberos Authentication with Keytab Credential
> ----------------------------------------------------------
>
> Key: FLINK-3929
> URL: https://issues.apache.org/jira/browse/FLINK-3929
> Project: Flink
> Issue Type: New Feature
> Reporter: Eron Wright
> Assignee: Vijay Srinivasaraghavan
> Labels: kerberos, security
> Original Estimate: 672h
> Remaining Estimate: 672h
>
> _This issue is part of a series of improvements detailed in the [Secure Data
> Access|https://docs.google.com/document/d/1-GQB6uVOyoaXGwtqwqLV8BHDxWiMO2WnVzBoJ8oPaAs/edit?usp=sharing]
> design doc._
> Add support for a keytab credential to be associated with the Flink cluster,
> to facilitate:
> - Kerberos-authenticated data access for connectors
> - Kerberos-authenticated ZooKeeper access
> Support both the standalone and YARN deployment modes.
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
