Enabling Knox authentication for Flink Dashboard

You can use Knox authentication for Flink Dashboard to provide integration with customer Single Sign-On (SSO) solutions. Knox uses Kerberos (SPNEGO) to strongly authenticate itself towards the services.

Flink is a known service for Knox. This means that you only need to enable the Auto Discovery feature of Knox, and Cloudera Manager provides and manages all the required service definition files.

Before you begin

Enabling Auto Discovery for Flink

  1. Go to your cluster in Cloudera Manager.
  2. Click on Knox from the list of Services.
  3. Select Configuration.
  4. Search for flink in the Search field.

    The Enable Auto Discovery (cdp-proxy) - Flink property is listed.

  5. Check the Auto Discovery (cdp-proxy) property box for the Enable Auto Discovery (cdp-proxy) - Flink property.
  6. Click on Save changes.

    The Refresh needed indicator appears beside the Knox service name.

  7. Refresh Knox.

Accessing the Flink Dashboard through Knox

  1. Go to your cluster in Cloudera Manager.
  2. Click on Knox from the list of Services.
  3. Select Knox Gateway Home.
    You will be prompted to provide your username and password.
  4. Click cdp-proxy under Topologies.

    Flink Dashboard should be listed under the cdp-proxy.

  5. Click on Flink Dashboard.

    You are redirected to the Flink Dashboard page.