[GitHub] [flink] gvijay452 opened a new pull request, #21275: [FLINK-12130][clients] : Allow dynamic loading of kerberos keytab from client end

[GitBox <gi...@apache.org>]

gvijay452 opened a new pull request, #21275:
URL: https://github.com/apache/flink/pull/21275

   ## What is the purpose of the change
   This change allows users to dynamically pass kerberos keytab and principal name when submitting a flink job. 
   
   Ex: flink run -m yarn-cluster -yD security.kerberos.login.keytab=/path/to/kerb.keytab -yD security.kerberos.login.principal=kerbprincipalname /path/to/my.jar
   
   
   ## Brief change log
   - Continuation to this PR: https://github.com/apache/flink/pull/8166 by [jiasheng55](https://github.com/jiasheng55)
   - Make applyCommandLineOptionsToConfiguration(CommandLine commandLine) a method of interface
   - CustomCommandLine and change it to applyCommandLineOptionsToConfiguration(Configuration configuration, CommandLine commandLine), as suggested by @aljoscha
   - Make org.apache.flink.client.cli.CliFrontend#parseParameters return parsed CommandLine
   - Apply command line options to configuration before installing security modules
   
   
   ## Verifying this change
   
   This change is already covered by existing tests, such as org.apache.flink.client.cli.CliFrontend...*
   
   ## Does this pull request potentially affect one of the following parts:
   
     - Dependencies (does it add or upgrade a dependency): (yes / no) - no
     - The public API, i.e., is any changed class annotated with `@Public(Evolving)`: (yes / no) - no
     - The serializers: (yes / no / don't know) - no
     - The runtime per-record code paths (performance sensitive): (yes / no / don't know) - no
     - Anything that affects deployment or recovery: JobManager (and its components), Checkpointing, Kubernetes/Yarn, ZooKeeper: (yes / no / don't know) - Yes, deployment
     - The S3 file system connector: (yes / no / don't know) - no
   
   ## Documentation
   
     - Does this pull request introduce a new feature? (yes / no) - no
     - If yes, how is the feature documented? (not applicable / docs / JavaDocs / not documented) - n/a
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [flink] flinkbot commented on pull request #21275: [FLINK-12130][clients] : Allow dynamic loading of kerberos keytab from client end

[GitBox <gi...@apache.org>]

flinkbot commented on PR #21275:
URL: https://github.com/apache/flink/pull/21275#issuecomment-1309153532

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "3635cbb567abc0ea8cebeaba90d8ed22f699eee8",
       "status" : "UNKNOWN",
       "url" : "TBD",
       "triggerID" : "3635cbb567abc0ea8cebeaba90d8ed22f699eee8",
       "triggerType" : "PUSH"
     } ]
   }-->
   ## CI report:
   
   * 3635cbb567abc0ea8cebeaba90d8ed22f699eee8 UNKNOWN
   
   <details>
   <summary>Bot commands</summary>
     The @flinkbot bot supports the following commands:
   
    - `@flinkbot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [flink] gvijay452 closed pull request #21275: [FLINK-12130][clients] : Allow dynamic loading of kerberos keytab from client end

[GitBox <gi...@apache.org>]

gvijay452 closed pull request #21275: [FLINK-12130][clients] : Allow dynamic loading of kerberos keytab from client end
URL: https://github.com/apache/flink/pull/21275


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org