You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@linkis.apache.org by GitBox <gi...@apache.org> on 2021/11/02 05:52:19 UTC
[GitHub] [incubator-linkis] saLeox opened a new pull request #1059: Support kerberos proxy user in Flink engine
saLeox opened a new pull request #1059:
URL: https://github.com/apache/incubator-linkis/pull/1059
### What is the purpose of the change
Support kerberos proxy user in Flink engine.
### Brief change log
- If kerberos proxy user is enabled, will add current user as proxy user, and append it into engine jar start command as new environment variables, so that the method UserGroupInformation.getCurrentUser().getUserName() can fetch.
### Verifying this change
This change added tests and can be verified as follows:
(example:)
- Make sure your cluster has integrated with kerberos;
- Remove the remark of kerberos setting, switch the wds.linkis.keytab.host.enabled and wds.linkis.keytab.proxyuser.enable onto true;
- Set security.kerberos.login.use-ticket-cache: true in flink-conf.yaml, but don't specify the keytab.
- Use Linkis API to submit Flink task, then the USER in Yarn UI will be the current user in Linkis.
### Does this pull request potentially affect one of the following parts:
- Dependencies (does it add or upgrade a dependency): (no)
- Anything that affects deployment: (no)
- The MGS(Microservice Governance Services), i.e., Spring Cloud Gateway, OpenFeign, Eureka.: (no)
### Documentation
- Does this pull request introduce a new feature? (no)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org
[GitHub] [incubator-linkis] peacewong merged pull request #1059: Support kerberos proxy user in Flink engine
Posted by GitBox <gi...@apache.org>.
peacewong merged pull request #1059:
URL: https://github.com/apache/incubator-linkis/pull/1059
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org