Securing Apache Flink Enabling security for Apache FlinkSince Flink is essentially just a YARN application, you mainly need to configure service level security settings for the Flink Dashboard and Gateway in Cloudera Manager. You can configure security during the installation or later in the Configuration menu for Flink.Securing Apache Flink jobsSubmitting Flink jobs in a secure environment requires every security parameter for authentication, authorization and other connector related security settings. You should prepare your keystore and keytab files for Flink and for also the chosen connector component. Securing Flink external REST endpoints with TLSConfigure TLS for Flink external REST endpoints when clients connect directly to the Flink REST API or web dashboard. Internal RPC and data transport traffic uses separate security.ssl.internal.* settings.Configuring TLS/SSL encryption manually for Flink servicesEnable TLS for Flink internal and REST endpoints across the cluster when Cloudera Manager cannot yet generate Flink keystores automatically. Configure central protocol and cipher settings, distribute host keystores, and apply Flink safety-valve properties.
