<#C03G7LJTS2G|> I'm tasked with implementing LDAP ...
# random
j
#C03G7LJTS2G I'm tasked with implementing LDAP user authentication to the Flink Dashboard and API which I'm attempting with a jaas.conf file. I've added this to configure a login as per the jaas.conf
Copy code
env.java.opts.jobmanager: "-Djava.security.auth.login.config=/data/flink/conf/jaas.conf"
And the jaas.conf looks like this
Copy code
FlinkLDAP {
    com.sun.security.auth.module.LdapLoginModule REQUIRED
    userProvider="ldap://*********:389/dc=***,dc=lab"
    userFilter="(&(objectClass=person)(uid={USERNAME}))"
    authIdentity="{USERNAME}"
    useSSL=false
    debug=true;
};
It's a microk8s deployment in an on-prem vsphere deployment using the flink operator
Copy code
apiVersion: flink.apache.org/v1beta1
kind: FlinkDeployment
metadata:
  name: basic-example
  namespace: flink
  annotations:
    ad.datadoghq.com/basic-example.logs: '[{"source":"flink","service":"basic-example"}]'
spec:
  image: flink:1.19
  flinkVersion: v1_19
  ingress:
    template: "**********/{{namespace}}/{{name}}(/|$)(.*)"
    className: "nginx"
    annotations:
      nginx.ingress.kubernetes.io/rewrite-target: "/$2"
  flinkConfiguration:
    taskmanager.numberOfTaskSlots: "2"
    env.java.opts.jobmanager: "-Djava.security.auth.login.config=/data/flink/conf/jaas.conf"
  serviceAccount: flink
  jobManager:
    resource:
      memory: "2048m"
      cpu: 1
  taskManager:
    resource:
      memory: "2048m"
      cpu: 1
  job:
    jarURI: local:///opt/flink/examples/streaming/StateMachineExample.jar
    parallelism: 2
    upgradeMode: savepoint
    state: running
    savepointTriggerNonce: 0
  podTemplate:
    spec:
      containers:
        - name: flink-main-container
          volumeMounts:
          - mountPath: /data/flink
            name: flink-volume
      volumes:
      - name: flink-volume
        hostPath:
          path: /data/flink
          type: Directory
I'm adding the jaas.conf to the volume mount /data/flink/ and not seeing any errors. When I browse to the dashboard, im not redirected to the ldap endpoint to sign in and tried using incognito. Any ideas?