[ 
https://issues.apache.org/jira/browse/FLINK-24212?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Xintong Song closed FLINK-24212.
--------------------------------
    Resolution: Fixed

Fixed via
- master (1.15): d532f5fc81f9acf611541cab440eb3d5a9de08cc
- release-1.14: 742ba0a171fc909a6e65b9581ce76ea35862c341

> kerberos krb5.conf file is mounted as empty directory, not the expected file
> ----------------------------------------------------------------------------
>
>                 Key: FLINK-24212
>                 URL: https://issues.apache.org/jira/browse/FLINK-24212
>             Project: Flink
>          Issue Type: Bug
>          Components: Deployment / Kubernetes
>    Affects Versions: 1.14.0, 1.15.0
>            Reporter: LiuZeshan
>            Assignee: LiuZeshan
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.14.0, 1.15.0
>
>         Attachments: mykrb5conf.yaml
>
>
> From FLINK-18971,we can mount kerberos krb5 conf file to pod with path 
> /etc/krb5.conf,however if the krb5 conf file is not named krb5.conf (e.g 
> named mykrb5.conf),the mount path /etc/krb5.conf in pod will be an empty 
> directory, not a file that we expect.
> {code:java}
> root@mykrb5-conf-test-6dd5c76f87-vfwh5:/# ls /etc/krb5.conf/ -la
> total 8
> drwxrwxrwx 2 root root 4096 Sep  8 10:42 .
> drwxr-xr-x 1 root root 4096 Sep  8 10:42 ..{code}
>  
>  The reason is that, the code  in 
> [KerberosMountDecrator#decroateFlinkPod|https://github.com/apache/flink/blob/7e91e82fca999ddefa7ebdf198b8cfd3b6998b8b/flink-kubernetes/src/main/java/org/apache/flink/kubernetes/kubeclient/decorators/KerberosMountDecorator.java#L110],
>  we create the deployment like this: 
> {code:java}
> ...
>         volumeMounts:
>         - mountPath: /etc/krb5.conf
>           name: my-krb5conf-volume
>           subPath: krb5.conf    
> ...
>       volumes:
>       - configMap:
>           defaultMode: 420
>           items:
>           - key: mykrb5.conf
>             path: mykrb5.conf
>           name: my-krb5conf
>         name: my-krb5conf-volume
> {code}
> path value should be set to const value "krb5.conf", not the file name that 
> user provide (path: mykrb5.conf).
>  we can use the yaml description file attachment to reproduce the problem.  
> [^mykrb5conf.yaml]
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to