Flink Security Enhancements
summary
Recent additions add native Kerberos keytab support so a Flink cluster can authenticate to HDFS, ZooKeeper and Kafka (no more short-lived delegation tokens), plus a simple service-level authorization cookie to block unauthorized submissions and optional TLS for Akka transport. Keytabs are shipped from the CLI into YARN/Mesos sandboxes, Kafka integration is exercised in demo logs, and PRs target Flink 1.2 (contributed by Dell EMC) — some workarounds and followups remain.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:15Flink Security Enhancements
- 1:49Delegation Token
- 2:35Problems with Delegation Tokens
- 9:30Service Level Authorization
- 20:51Questions
- 26:32Network Virtualization
related talks
36mFlink SQL: Unified Streaming and batch for hive integration
23mObtain, Distribute and Use Temporary Credentials Automatically in Apache Spark and Apache Flink
41mBeyond the Hype: When Apache Flink Solves Real Problems
37mKeynote | Flink Ahead: What Comes After Unified Batch & Streaming?
35mProduction-Ready Flink and Hive Integration - what story you can tell now?
41mKafka Security - A brief overview of its history ... #bbuzz
27mEnd-to-End Encryption for Streaming Data Pipelines
25mFlink on Karmada: Building Resilient Data Pipelines on Multi-Cluster K8s