Login  Register

Using several Kerberos keytabs in standalone cluster

classic Classic list List threaded Threaded
2 messages Options Options
Embed post
Permalink
Reply | Threaded
Open this post in threaded view
| More
Print post
Permalink

Using several Kerberos keytabs in standalone cluster

Olga Luganska
8 posts
Hello,

According to the documentation, the security setup is shared by all the jobs on the same cluster, and if users need to use a different keytab, 
it is easily achievable in Yarn cluster setup by starting a new cluster with a different flink-conf.yaml
Is it possible to setup a standalone cluster in such a way that each user can run his respective jobs with his own keytab?

Thank you very much,
Olga
Reply | Threaded
Open this post in threaded view
| More
Print post
Permalink

Re: Using several Kerberos keytabs in standalone cluster

Aljoscha Krettek
1299 posts
Hi Olga,

I think right now this is not possible because we piggybag on the YARN shipment functionality for shipping the Keytab along with the TaskManagers.

I think changing this would require somewhat bigger changes because loading the Keytab happens when the TaskManagers are brought up.

Best,
Aljoscha

On 8. Oct 2018, at 04:52, Olga Luganska <[hidden email]> wrote:

Hello,

According to the documentation, the security setup is shared by all the jobs on the same cluster, and if users need to use a different keytab, 
it is easily achievable in Yarn cluster setup by starting a new cluster with a different flink-conf.yaml
Is it possible to setup a standalone cluster in such a way that each user can run his respective jobs with his own keytab?

Thank you very much,
Olga