You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by al...@apache.org on 2018/08/01 15:30:39 UTC

[flink] 01/04: [FLINK-10013] Fix Kerberos integration for FLIP-6 YarnTaskExecutorRunner

This is an automated email from the ASF dual-hosted git repository.

aljoscha pushed a commit to branch release-1.5
in repository https://gitbox.apache.org/repos/asf/flink.git

commit 904a12b056c23079b32b2b99cc5df11d4bd2d0f8
Author: Aljoscha Krettek <al...@gmail.com>
AuthorDate: Wed Aug 1 15:52:43 2018 +0200

    [FLINK-10013] Fix Kerberos integration for FLIP-6 YarnTaskExecutorRunner
---
 .../src/main/java/org/apache/flink/yarn/YarnTaskExecutorRunner.java   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/flink-yarn/src/main/java/org/apache/flink/yarn/YarnTaskExecutorRunner.java b/flink-yarn/src/main/java/org/apache/flink/yarn/YarnTaskExecutorRunner.java
index 4102158..0e70de9 100644
--- a/flink-yarn/src/main/java/org/apache/flink/yarn/YarnTaskExecutorRunner.java
+++ b/flink-yarn/src/main/java/org/apache/flink/yarn/YarnTaskExecutorRunner.java
@@ -117,13 +117,13 @@ public class YarnTaskExecutorRunner {
 			LOG.info("YARN daemon is running as: {} Yarn client user obtainer: {}",
 					currentUser.getShortUserName(), yarnClientUsername);
 
-			SecurityConfiguration sc = new SecurityConfiguration(configuration);
-
 			if (keytabPath != null && remoteKeytabPrincipal != null) {
 				configuration.setString(SecurityOptions.KERBEROS_LOGIN_KEYTAB, keytabPath);
 				configuration.setString(SecurityOptions.KERBEROS_LOGIN_PRINCIPAL, remoteKeytabPrincipal);
 			}
 
+			SecurityConfiguration sc = new SecurityConfiguration(configuration);
+
 			final String containerId = ENV.get(YarnFlinkResourceManager.ENV_FLINK_CONTAINER_ID);
 			Preconditions.checkArgument(containerId != null,
 				"ContainerId variable %s not set", YarnFlinkResourceManager.ENV_FLINK_CONTAINER_ID);