Flink web UI authentication

[Sampath Bhat]

Hello

I would like to know if flink supports any user level authentication like username/password for flink web ui.

Regards

Sampath S

[Nico Kruber]

Hi Sampath,
aside from allowing only certain origins via the configuration parameter
"web.access-control-allow-origin", I am not aware of anything like
username/password authentication. Chesnay (cc'd) may know more about
future plans.
You can, however, wrap a proxy like squid around the web UI if you need
this.


Regards
Nico

On 13/03/18 11:16, Sampath Bhat wrote:
> Hello
>
> I would like to know if flink supports any user level authentication
> like username/password for flink web ui.
>
> Regards
> Sampath S
>

[Sampath Bhat]

Hi Nico

Flink does not support username/password authentication as of now.

we can do something like this:
Here you got a guide from the guys of DigitalOcean about protecting an url
with basic authentication:
https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

More importantly, how can this "web.access-control-allow-origin" parameter help in authentication?

It is used for inter origin resource allocation. So can I use this parameter to specify few hostnames so that only those hostname can access the flink web ui? I dont think so. It is mainly used when another domain page tries to access flink web ui.

Let me know if I'm missing something.

On Mon, Mar 19, 2018 at 11:20 PM, Nico Kruber <[hidden email]> wrote:

Hi Sampath,
aside from allowing only certain origins via the configuration parameter
"web.access-control-allow-origin", I am not aware of anything like
username/password authentication. Chesnay (cc'd) may know more about
future plans.
You can, however, wrap a proxy like squid around the web UI if you need
this.


Regards
Nico

On 13/03/18 11:16, Sampath Bhat wrote:
> Hello
>
> I would like to know if flink supports any user level authentication
> like username/password for flink web ui.
>
> Regards
> Sampath S
>