Unfortunately Flink does not yet support SSL mutual authentication nor any form of client authentication. There is an ongoing discussion about it: http://apache-flink-mailing-list-archive.1008284.n3.nabble.com/DISCUSS-Service-Authorization-redux-td18890.html
A workaround that I've seen is to use nginx as a frontend proxy. Be sure to lock down the underlying endpoints somehow. If you choose to go this route, Patrick Lucas gave a related talk recently (Flink in Containerland): https://youtu.be/w721NI-mtAA -Eron On Mon, Sep 18, 2017 at 1:30 AM, Fabian Hueske <fhue...@gmail.com> wrote: > Hi, > > sorry for the late response. > Flink uses Netty for network communication which supports SSL client > authentication. > I haven't tried it myself, but would think that this should work in Flink > as well if you configure the certificates correctly. > > We should update the docs to cover this aspect. > Feedback on this would be very welcome > > Thanks, Fabian > > 2017-09-06 14:23 GMT+02:00 avivros <aviv.rosenf...@iqpiot.com>: > >> Does jobmanager.web.ssl.enabled supports Client SSL Authentication? >> >> >> >> >> -- >> Sent from: http://apache-flink-user-mailing-list-archive.2336050.n4. >> nabble.com/ >> > >
