James Cox
07/12/2024, 1:03 PMenv.java.opts.jobmanager: "-Djava.security.auth.login.config=/data/flink/conf/jaas.conf"
And the jaas.conf looks like this
FlinkLDAP {
com.sun.security.auth.module.LdapLoginModule REQUIRED
userProvider="ldap://*********:389/dc=***,dc=lab"
userFilter="(&(objectClass=person)(uid={USERNAME}))"
authIdentity="{USERNAME}"
useSSL=false
debug=true;
};
It's a microk8s deployment in an on-prem vsphere deployment using the flink operator
apiVersion: flink.apache.org/v1beta1
kind: FlinkDeployment
metadata:
name: basic-example
namespace: flink
annotations:
ad.datadoghq.com/basic-example.logs: '[{"source":"flink","service":"basic-example"}]'
spec:
image: flink:1.19
flinkVersion: v1_19
ingress:
template: "**********/{{namespace}}/{{name}}(/|$)(.*)"
className: "nginx"
annotations:
nginx.ingress.kubernetes.io/rewrite-target: "/$2"
flinkConfiguration:
taskmanager.numberOfTaskSlots: "2"
env.java.opts.jobmanager: "-Djava.security.auth.login.config=/data/flink/conf/jaas.conf"
serviceAccount: flink
jobManager:
resource:
memory: "2048m"
cpu: 1
taskManager:
resource:
memory: "2048m"
cpu: 1
job:
jarURI: local:///opt/flink/examples/streaming/StateMachineExample.jar
parallelism: 2
upgradeMode: savepoint
state: running
savepointTriggerNonce: 0
podTemplate:
spec:
containers:
- name: flink-main-container
volumeMounts:
- mountPath: /data/flink
name: flink-volume
volumes:
- name: flink-volume
hostPath:
path: /data/flink
type: Directory
I'm adding the jaas.conf to the volume mount /data/flink/ and not seeing any errors. When I browse to the dashboard, im not redirected to the ldap endpoint to sign in and tried using incognito. Any ideas?