Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 95A16200C41 for ; Fri, 24 Mar 2017 08:51:05 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 94145160B93; Fri, 24 Mar 2017 07:51:05 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id B3787160B82 for ; Fri, 24 Mar 2017 08:51:04 +0100 (CET) Received: (qmail 95623 invoked by uid 500); 24 Mar 2017 07:50:58 -0000 Mailing-List: contact user-help@flink.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@flink.apache.org Delivered-To: mailing list user@flink.apache.org Received: (qmail 95613 invoked by uid 99); 24 Mar 2017 07:50:58 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 24 Mar 2017 07:50:58 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 5A7441AFD80 for ; Fri, 24 Mar 2017 07:50:58 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.879 X-Spam-Level: * X-Spam-Status: No, score=1.879 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id FOYVX1HHxoKI for ; Fri, 24 Mar 2017 07:50:56 +0000 (UTC) Received: from mail-wm0-f41.google.com (mail-wm0-f41.google.com [74.125.82.41]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 1E6F45F245 for ; Fri, 24 Mar 2017 07:50:56 +0000 (UTC) Received: by mail-wm0-f41.google.com with SMTP id u132so6332470wmg.0 for ; Fri, 24 Mar 2017 00:50:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=AvSaYMNiWsFGgqJLupuAgcGAXVoALXhDzfXY1/0IvFI=; b=hCAtrmEPGEMUOCRHDjFDvZ/+ZIQZRZP+Z9bC1h/wlzu6YVlUsLbr6EPwcuaBOkAQhU syvh+zgzDluvbdj66thNZhVpOz6r68WrYiEQxM0Z6e2XXV9tsRSl6jq7TM7trUMJEnuF WTMaIioh3cJmUzrIhZQq1LEtWc8KB9ui1YIamTmQtFwUzITbEe9q8DF/sLy7De71D2aN ybiWAhPv4sTFjyWP9FnOmdV6bXGArtaSfmkeywF6KB3CgDe9WimP6duuLRkVgPoLiSkI mo7m+TWPiQS9WoFEcG5+mibcS5fRcsOhCRJftay45R45BBsJl3EKQMvGuIn5wE8K7ByS P11w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=AvSaYMNiWsFGgqJLupuAgcGAXVoALXhDzfXY1/0IvFI=; b=a+3CXiR6mWRHQGM11um86Jqlp42AOIDRgbt4nHBDx4PkXoXssPHPqTpm/MWUZOM/Dg rEEc3OeKIRXCV0TVzd4CoJ8T3aB04LAyUKBgIBUZDkIihk31+eACbzD2QrWg2uJD/25M xpZVar50Pu0p+o40m5JVXnQV6i+u1pckKMfbytvLkhf/5//QzdDW4fPNcIhMxTGMJPGw B1IREfMcMsTjH65lS/OKvWQTGqIS50X5vWgp1Nl9zNVlC6Hmfjq/OvlMsMVW9vRF9yC0 2aondPFj4y5fOqdFSIjo23MO1F8VzvHe4RPeVT8BuBH1IQR5Kq5ljkRE7gsPcZan63xS tYkA== X-Gm-Message-State: AFeK/H1/Okk2bi5X0Tve+hmVE79dW5w6NHv2NcK44rPM+LNStv+mJt9CkuHCu1fViOSYUFxxD/W5+Ib7Y7CSAw== X-Received: by 10.28.178.142 with SMTP id b136mr1500964wmf.57.1490341848164; Fri, 24 Mar 2017 00:50:48 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.158.38 with HTTP; Fri, 24 Mar 2017 00:50:47 -0700 (PDT) In-Reply-To: References: From: Chakravarthy varaga Date: Fri, 24 Mar 2017 07:50:47 +0000 Message-ID: Subject: Re: deploying flink cluster in AWS - Containerized To: user@flink.apache.org Content-Type: multipart/alternative; boundary=001a1144403a742d07054b75404b archived-at: Fri, 24 Mar 2017 07:51:05 -0000 --001a1144403a742d07054b75404b Content-Type: text/plain; charset=UTF-8 Hi, I request someone to help here. Best Regards CVP On Thu, Mar 23, 2017 at 10:13 PM, Chakravarthy varaga < chakravarthyvp@gmail.com> wrote: > I'm looking forward to hearing some updates on this... > > Any help here is highly appreciated !! > > On Thu, Mar 23, 2017 at 4:20 PM, Chakravarthy varaga < > chakravarthyvp@gmail.com> wrote: > >> Hi Team, >> >> We are doing a PoC to deploy Flink cluster on AWS. All runtime >> components will be dockerized. >> >> I have few questions in relation to discover & security: >> >> 1. How does Job Manager discover task managers? Do they talk to >> over TCP ? >> >> 2. If the runtime components TM, JM are containerized how are the >> IPs resolved dynamically? Basically do I have to configure the JM with the >> hostnames of the TMs. If so, if the TMs are on ephemeral IPs and on restart >> of TM how does the job manager know the TM's (IP/Host). Before I go into >> DNS and subnets, I'd like to understand how they disvoer & talk to each >> other ! >> >> 3. I went through some Flink materials on the web on security >> precisely on kerebros. However how do I ensure that user level >> authentication is applied on job management. For ex., only certain users >> are allowed to start/stop jobs ? This question is in relation to if flink >> is deployed as standalone-cluster >> >> Thanks & Regards >> CVP >> > > --001a1144403a742d07054b75404b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

=C2=A0=C2=A0=C2=A0 I reque= st someone to help here.

Best Regards
CVP

On Thu, Mar 23, 201= 7 at 10:13 PM, Chakravarthy varaga <chakravarthyvp@gmail.com>= ; wrote:
I&#= 39;m looking forward to hearing some updates on this...

Any he= lp here is highly appreciated !!

On Thu, M= ar 23, 2017 at 4:20 PM, Chakravarthy varaga <chakravarthyvp@gmail= .com> wrote:
Hi Team,

=C2=A0=C2=A0=C2=A0=C2=A0 We are doi= ng a PoC to deploy Flink cluster on AWS. All runtime components will be doc= kerized.
=C2=A0=C2=A0=C2=A0=C2=A0
=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 I have few questions in relation to discover & secur= ity:

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 1. How does Job Manag= er discover task managers? Do they talk to over TCP ?

=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 2. If the runtime components TM, JM are contain= erized how are the IPs resolved dynamically? Basically do I have to configu= re the JM with the hostnames of the TMs. If so, if the TMs are on ephemeral= IPs and on restart of TM how does the job manager know the TM's (IP/Ho= st). Before I go into DNS and subnets, I'd like to understand how they = disvoer & talk to each other !

=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 3. I went through some Flink materials on the w= eb on security precisely on kerebros. However how do I ensure that user lev= el authentication is applied on job management. For ex., only certain users= are allowed to start/stop jobs ? This question is in relation to if flink = is deployed as standalone-cluster
=C2=A0=C2=A0
Than= ks & Regards
CVP


--001a1144403a742d07054b75404b--