You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "Márton Balassi (Jira)" <ji...@apache.org> on 2023/03/02 16:08:00 UTC
[jira] [Closed] (FLINK-31258) can not get kerberos keytab in flink operator
[ https://issues.apache.org/jira/browse/FLINK-31258?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Márton Balassi closed FLINK-31258.
----------------------------------
Fix Version/s: 1.17.0
Assignee: Márton Balassi
Resolution: Fixed
This is actually due to the KerberosConfigMount in the flink-kubernetes module.
We introduced a config to disable this in 1.17:
https://nightlies.apache.org/flink/flink-docs-master/docs/deployment/config/#kubernetes-decorator-kerberos-mount-enabled
It is straight-forward to backport it if you need it in previous versions on your end, I would not cut a new Apache release for this of older versions.
> can not get kerberos keytab in flink operator
> ---------------------------------------------
>
> Key: FLINK-31258
> URL: https://issues.apache.org/jira/browse/FLINK-31258
> Project: Flink
> Issue Type: Bug
> Components: Kubernetes Operator
> Reporter: Jun Zhang
> Assignee: Márton Balassi
> Priority: Major
> Fix For: 1.17.0
>
>
> env:
> flink k8s operator 1.4
> flink 1.14.6 :
> the conf
> {code:java}
> flinkConfiguration:
> security.kerberos.login.keytab=/path/your/user.keytab
> security.kerberos.login.principal=your@HADOOP.COM {code}
> and I get an exception:
>
> {code:java}
> Status:
> Cluster Info:
> Error: {"type":"org.apache.flink.kubernetes.operator.exception.ReconciliationException","message":"org.apache.flink.client.deployment.ClusterDeploymentException: Could not create Kubernetes cluster \"basic-example\".","throwableList":[{"type":"org.apache.flink.client.deployment.ClusterDeploymentException","message":"Could not create Kubernetes cluster \"basic-example\"."},{"type":"org.apache.flink.configuration.IllegalConfigurationException","message":"Kerberos login configuration is invalid: keytab [/path/your/user.keytab] doesn't exist!"}]} {code}
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)