[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17375367#comment-17375367 ] Márton Balassi commented on FLINK-21108: Based on the communities decision this will be

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17357107#comment-17357107 ] Gabor Somogyi commented on FLINK-21108: --- [~xexplorer] thanks for sharing your view. We try our

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17357032#comment-17357032 ] Xiaoguang Sun commented on FLINK-21108: --- Well, I‘m ok as long as our concern about security is

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17356332#comment-17356332 ] Gabor Somogyi commented on FLINK-21108: --- Sure. Since the code exists it's not a big waste to put

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17356331#comment-17356331 ] Till Rohrmann commented on FLINK-21108: --- Let's first agree on the FLIP before opening PRs. This

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17355628#comment-17355628 ] Gabor Somogyi commented on FLINK-21108: --- Thanks for FLIP suggestions here again. I've split the

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17355591#comment-17355591 ] Márton Balassi commented on FLINK-21108: Hi [~xexplorer], Thank you for raising this and

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17333625#comment-17333625 ] Flink Jira Bot commented on FLINK-21108: This issue was marked "stale-assigned" and has not

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17324808#comment-17324808 ] Till Rohrmann commented on FLINK-21108: --- Thanks for the update [~xexplorer]. Sorry that the

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17323096#comment-17323096 ] Xiaoguang Sun commented on FLINK-21108: --- I'm still working on this feature. The feature itself is

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17322857#comment-17322857 ] Flink Jira Bot commented on FLINK-21108: This issue is assigned but has not received an update

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17308565#comment-17308565 ] Xiaoguang Sun commented on FLINK-21108: --- Hi [~trohrmann], I have submitted a

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17306926#comment-17306926 ] Xiaoguang Sun commented on FLINK-21108: --- Sorry for the late reply, let me rebase the PR agains the

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17303960#comment-17303960 ] Till Rohrmann commented on FLINK-21108: --- [~xexplorer] you can also open a PR against Flink. Then

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17303017#comment-17303017 ] Scott McCallen commented on FLINK-21108: [~xexplorer]  That's good news! We are planning to use

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17303010#comment-17303010 ] Xiaoguang Sun commented on FLINK-21108: --- Hi [~sjmccallen], It's great to know that this is not a

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17303007#comment-17303007 ] Scott McCallen commented on FLINK-21108: Hi [~trohrmann] [~xexplorer] I am also interested in

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17286428#comment-17286428 ] Xiaoguang Sun commented on FLINK-21108: --- Hi [~trohrmann] I have done some work to make rest

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17280918#comment-17280918 ] Xiaoguang Sun commented on FLINK-21108: --- Sure > Flink runtime rest server and history server

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17280894#comment-17280894 ] Till Rohrmann commented on FLINK-21108: --- The easier something is to configure the better I think.

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17280342#comment-17280342 ] Xiaoguang Sun commented on FLINK-21108: --- If we want to make it easier to use. The config options

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17280218#comment-17280218 ] Xiaoguang Sun commented on FLINK-21108: --- Without extra module installed both nginx and HAProxy

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17279010#comment-17279010 ] Till Rohrmann commented on FLINK-21108: --- Maybe you could first quickly summarize the final

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17278866#comment-17278866 ] Xiaoguang Sun commented on FLINK-21108: --- I'm not sure what's the next step. Should I wait for

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17278734#comment-17278734 ] Till Rohrmann commented on FLINK-21108: --- Thanks for the information [~xexplorer]. +1 for adding

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17278520#comment-17278520 ] Xiaoguang Sun commented on FLINK-21108: --- Just bring this up again in case notification got missed, 

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17274547#comment-17274547 ] Xiaoguang Sun commented on FLINK-21108: --- Of cause all authentication methods work at HTTP protocol

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17274435#comment-17274435 ] Till Rohrmann commented on FLINK-21108: --- How do other authentication methods work? I just wanna

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17274277#comment-17274277 ] Xiaoguang Sun commented on FLINK-21108: --- We can start from basic auth and support more

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17273768#comment-17273768 ] Till Rohrmann commented on FLINK-21108: --- Client side authentication sounds good to me. How would

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17273212#comment-17273212 ] Xiaoguang Sun commented on FLINK-21108: --- Cluster IP can be accessed by anybody running within the

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17273006#comment-17273006 ] Till Rohrmann commented on FLINK-21108: --- One way to limit the access to real servers is to not

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272950#comment-17272950 ] Xiaoguang Sun commented on FLINK-21108: --- At this time, anybody who knows the endpoint of a running

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272772#comment-17272772 ] Chesnay Schepler commented on FLINK-21108: -- I'm not sure I understand the question, could you

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272724#comment-17272724 ] Xiaoguang Sun commented on FLINK-21108: --- Just came up with a question about proxy authentication.

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272717#comment-17272717 ] Chesnay Schepler commented on FLINK-21108: -- I'm quite wary of implementing authentication on

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272505#comment-17272505 ] Xiaoguang Sun commented on FLINK-21108: --- BTW: here is a reference implementation of basic

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272504#comment-17272504 ] Xiaoguang Sun commented on FLINK-21108: --- Both client side and client are pretty simple. They share

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272193#comment-17272193 ] Till Rohrmann commented on FLINK-21108: --- I think you are right that we need to support this from

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272097#comment-17272097 ] Xiaoguang Sun commented on FLINK-21108: --- Rest client has to support authentication to submit job

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17272088#comment-17272088 ] Till Rohrmann commented on FLINK-21108: --- Thanks for creating this issue [~xexplorer]. The

[jira] [Commented] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

[ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17270911#comment-17270911 ] Xiaoguang Sun commented on FLINK-21108: --- Changes: