re： Does Flink cluster security works in Flink 1.1.4 release?

[Zhangrucong <zh...@huawei.com>]

Hi Stephan:
          Thanks for your reply.
You mean the CLI、JM、TM、WebUI  have supported Kerberos authentication only in yarn cluster model in 1.1.x release？

发件人: Stephan Ewen [mailto:sewen@apache.org]
发送时间: 2017年1月4日 17:23
收件人: user@flink.apache.org<ma...@flink.apache.org>
主题: Re: Does Flink cluster security works in Flink 1.1.4 release?

Hi!

Flink 1.1.x supports Kerberos for Hadoop (HDFS, YARN, HBase) via Hadoop's ticket system. It should work via kinit, in the same way when submitting a secure MapReduce job.

Kerberos for ZooKeeper, Kafka, etc, is only part of the 1.2 release.

Greetings,
Stephan


On Wed, Jan 4, 2017 at 7:25 AM, Zhangrucong <zh...@huawei.com>> wrote:
Hi:
     Now I use Flink 1.1.4 release in standalone cluster model. I want to do the Kerberos authentication between Flink CLI and the Jobmanager. But in the flink-conf.yaml, there is no Flink cluster security configuration.
Does the Kerberos authentication works in Flink 1.1.4 release?
Thanks in advance!

Re: Does Flink cluster security works in Flink 1.1.4 release?

[Stephan Ewen <se...@apache.org>]

I think you can also use Kerberos in the standalone mode in 1.1.x, but is
is more tricky - you need do a "kinit" on every host where you launch a
Flink process.

Flink 1.2 has better Kerberos support.

On Fri, Jan 6, 2017 at 4:19 AM, Zhangrucong <zh...@huawei.com> wrote:

> Hi Stephan:
>
>           Thanks for your reply.
>
> You mean the CLI、JM、TM、WebUI  have supported Kerberos authentication only
> in yarn cluster model in 1.1.x release？
>
>
>
> *发件人:* Stephan Ewen [mailto:sewen@apache.org <se...@apache.org>]
> *发送时间:* 2017年1月4日 17:23
> *收件人:* user@flink.apache.org
> *主题:* Re: Does Flink cluster security works in Flink 1.1.4 release?
>
>
>
> Hi!
>
>
>
> Flink 1.1.x supports Kerberos for Hadoop (HDFS, YARN, HBase) via Hadoop's
> ticket system. It should work via kinit, in the same way when submitting a
> secure MapReduce job.
>
>
>
> Kerberos for ZooKeeper, Kafka, etc, is only part of the 1.2 release.
>
>
>
> Greetings,
>
> Stephan
>
>
>
>
>
> On Wed, Jan 4, 2017 at 7:25 AM, Zhangrucong <zh...@huawei.com>
> wrote:
>
> Hi:
>
>      Now I use Flink 1.1.4 release in standalone cluster model. I want to
> do the Kerberos authentication between Flink CLI and the Jobmanager. But in
> the flink-conf.yaml, there is no Flink cluster security configuration.
>
> Does the Kerberos authentication works in Flink 1.1.4 release?
>
> Thanks in advance!
>
>
>
>
>