Github user mxm commented on the issue:

    https://github.com/apache/flink/pull/2275
  
    Thanks for testing this on an actual secure cluster. 
    
    Hmpf, only allowing to bind to privileged ports doesn't really improve 
security but we have to deal with this limitation somehow. I was initially 
thinking we could just include a custom version of the `MiniKDC` dependency in 
the Flink code. As you pointed out, this is not possible because the problem 
lies in the `SecureDataNodeStarter` which returns the secure resources. This 
class is part of `hadoop-hdfs`which we can't include a custom version because 
it depends on the Hadoop version provided during build time.
    
    Once the patch is out, we can run this test in a special profile where we 
set the Hadoop version which supports non-privileged ports. As of now, I don't 
see a feasible solution other than skipping this test.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---

Reply via email to