[jira] [Comment Edited] (FLINK-21108) Flink runtime rest server and history server webmonitor do not require authentication.

["Xiaoguang Sun (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-21108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17272097#comment-17272097 ] 

Xiaoguang Sun edited comment on FLINK-21108 at 1/26/21, 1:11 PM:
-----------------------------------------------------------------

Rest client has to support authentication to submit job to cluster behind such proxy, so there must be at least something within Flink to make job submission work. 

Another thing is that adding a reverse proxy make deployment more complicate. Unless user is always running Flink on K8S and use ingress to add authentication.


was (Author: xexplorer):
Rest client has to support authentication to submit job to cluster behind such proxy, so there must be at least something within flink to make job submission work. 

Another thing is that adding a reverse proxy make deployment more complicate. Unless user is always running Flink on K8S and use ingress to add authentication.

> Flink runtime rest server and history server webmonitor do not require authentication.
> --------------------------------------------------------------------------------------
>
>                 Key: FLINK-21108
>                 URL: https://issues.apache.org/jira/browse/FLINK-21108
>             Project: Flink
>          Issue Type: New Feature
>          Components: Runtime / REST, Runtime / Web Frontend
>            Reporter: Xiaoguang Sun
>            Priority: Major
>              Labels: pull-request-available
>
> Flink runtime rest server and history server webmonitor do not require authentication. At certain scenarios, prohibiting unauthorized access is desired. Http basic authentication can be used here.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)