Homepage/Cloudera Streaming Analytics1.9.0

(Private Cloud)

Search Documentation

▶︎Cloudera
1. Reference Architectures
▶︎Cloudera Public Cloud
▼Cloudera Private Cloud
▶︎Cloudera Manager
1. Cloudera Manager
▶︎Applications
▶︎Legacy
▶︎

Data Services
Getting Started
Cloudera Manager
Management Console
Replication Manager
Data Catalog
Data Engineering
Data Warehouse
Data Warehouse Runtime
Cloudera AI
Base
Getting Started
Runtime
Upgrade
Storage
Flow Management
Streaming Analytics
Flow Management Operator
Streaming Analytics Operator
Streams Messaging Operator

«

Filter topics

Cloudera Streaming Analytics
▶︎Release Notes
▶︎Download
1. Download location of CSA
▶︎Apache Flink Overview
▶︎SQL Stream Builder Overview
▶︎Quick Start
▶︎Installation & Upgrade
▼Security
1. ▼Securing Apache Flink
2. ▶︎Securing SQL Stream Builder
▶︎Using SQL Stream Builder
▶︎Using Apache Flink
▶︎Storm Flink Migration
1. ▶︎Comparing Storm and Flink
2. Migrating from Storm to Flink
SQL Stream Builder REST API Reference

Accessing the Flink Dashboard through Knox
Adding Catalogs
Adding data formats
Adding Flink as a Service
Adding Kafka Data Source
Adding new connectors
Adding SSB as a Service
Adjusting logging configuration in Advanced Settings
ALTER Statements
Apache Flink Overview
Application development
Assigning Kafka keys in streaming queries
Atlas entities in Flink metadata collection
Authentication and encryption for Flink
Authentication in SSB
Avro format
Behavioral changes
Blackhole connector
CDC connectors
Cloudera Flink Tutorials
Cloudera Streaming Analytics
Cluster service layout with Flink
Cluster service layout with SSB
Collecting diagnostic data
Comparing Storm and Flink
Component support
Conceptual differences
Configuring custom Kerberos principal for Apache Flink
Configuring custom Kerberos principal for SQL Stream Builder
Configuring Databases for SSB
Configuring Flink application resources
Configuring Flink applications
Configuring Kafka tables
Configuring Ranger policies for Flink
Configuring Ranger policies for SSB
Configuring Retention Time for Materialized Views
Configuring RocksDB state backend
Configuring SQL job settings
Configuring YARN queue for SQL jobs
Connectors
Converting DataStreams to Tables
Converting Tables to DataStreams
Core features of Flink
CREATE Statements
Creating a project
Creating and configuring the HBaseSinkFunction
Creating and naming SQL jobs
Creating Atlas entity type definitions for Flink
Creating Java User-defined functions
Creating Javascript User-defined Functions
Creating Materialized Views
Creating new Flink application versions
Creating Webhook tables
CSV format
Data Enrichment
Data formats
Data sources
Data Transformations tab
Data Types
Data types for Kafka connector
Datagen connector
DataStream API interoperability
DataStream connectors
Default ports for Flink and SSB
Deployment scenarios
Deserialization tab
Developing JavaScript functions
Differences in architecture
Differences in data distribution
Download
Download location of CSA
DROP Statements
Dynamic SQL Hints
Enabling checkpoints for Flink applications
Enabling Flink DEBUG logging
Enabling High Availability for SSB
Enabling Kerberos authentication
Enabling Knox authentication
Enabling Knox authentication for Flink Dashboard
Enabling Knox Auto Discovery for Flink
Enabling savepoints for Flink applications
Enabling security for Apache Flink
Enabling SPNEGO authentication for Flink Dashboard
Enabling TLS for database connection
Encryption in SSB
Event Time tab
Example: joining Kafka and Kudu tables
Executing SQL jobs in production mode
Faker connector
Filesystem connector
Fixed issues
Flink API Support
Flink application example
Flink application structure
Flink Dashboard
Flink DDL
Flink DML
Flink Project Template
Flink Queries
Flink SQL
Flink SQL tables
Flink Terminology
Functions
Getting Started
Governance
Governance
HBase sink with Flink
Hive catalog
Importing a project
INSERT Statements
Installation
Installation & Upgrade
Installing CSD and Parcel
JDBC connector
Job lifecycle
Joining streaming and bounded tables
JSON format
Kafka connector
Kafka connectors
Kafka Metrics Reporter
Kafka tables
Kafka with Flink
Key features of SSB
Known issues and limitations
Kudu catalog
Kudu with Flink
Managing member of a project
Managing session for SQL jobs
Managing time in SSB
Masking information before using source control
Materialized View Pagination
Materialized views
Maven dependencies in Flink
Migrating Flink service to a different host
Migrating from Storm to Flink
Migration
Monitoring
Monitoring
Navigating in a project
Notifications
Other supported statements
Performance & Scalability
Projects
Properties tab
Quick Start
Quick Start for Flink
Quick Start for SSB
Reference
Release Notes
REST API
Resuming Flink applications
Resuming SQL jobs
Running a Flink job
Running a simple Flink application
Running SQL Stream jobs
Schema Definition tab
Schema Registry catalog
Schema Registry formats
Schema Registry with Flink
Securing Apache Flink
Securing Apache Flink jobs
Securing SQL Stream Builder
Security
Setting parallelism and max parallelism
Setting the environment for a project
Setting the Java executable for the Flink client
Setting up MySQL/MariaDB database for SSB
Setting up Oracle database for SSB
Setting up PostgreSQL database for SSB
Setting up your HDFS Home directory
Source control of a project
Source, operator and sink in DataStream API
SQL and Table API
SQL and Table API supported features
SQL catalogs for Flink
SQL connectors for Flink
SQL Examples
SQL jobs
SQL Queries in Flink
SQL Statements in Flink
SQL Stream Builder architecture
SQL Stream Builder Overview
Stopping Flink applications
Stopping SQL Stream jobs
Storm Flink Migration
Streaming Analytics in Cloudera
Streams Messaging Manager integration
Support Matrix
Supported basic data types
Supported data types
System Requirements
Tables
Testing and validating Flink applications
Unsupported features
Upgrade
Upgrading CSA artifacts for Flink service
Upgrading CSA artifacts for SQL Stream Builder service
Upgrading Flink service
Upgrading SQL Stream Builder service
Uploading or unlocking your keytab
Using Apache Flink
Using connectors with templates
Using Dynamic Materialized View Endpoints
Using EncryptTool for Flink properties
Using Flink CLI
Using SQL Stream Builder
Using SQL Stream Builder with Cloudera Data Visualization
Using System Functions
Verifying metadata collection
What is Apache Flink?
What is SQL Stream Builder?
What's new in Cloudera Streaming Analytics

«

Filter topics

Securing Apache Flink

▼Securing Apache Flink
▶︎Securing SQL Stream Builder

»

Securing Apache Flink

Authentication and encryption for Flink
You must use authentication and encryption to secure your data and data sources. You can use Kerberos and TLS/SSL authentication to secure your Flink jobs. The administrator should provide your keystore and truststore credentials for your Cloudera user.
Enabling security for Apache Flink
Since Flink is essentially just a YARN application, you mainly need to configure service level security settings for the Flink Dashboard and Gateway in Cloudera Manager. You can configure security during the installation or later in the Configuration menu for Flink.
Enabling SPNEGO authentication for Flink Dashboard
You must manually configure the SPNEGO authentication for Flink Dashboard in Cloudera Manager to enable secure access for users as by default the authentication is turned off.
Enabling Knox authentication for Flink Dashboard
You can use Knox authentication for Flink Dashboard to provide integration with customer Single Sign-On (SSO) solutions. Knox uses Kerberos (SPNEGO) to strongly authenticate itself towards the services.
Configuring Ranger policies for Flink
You must add Flink users to the Ranger policies that are used by Kafka, Schema Registry, and Kudu to provide access to topics, schemas and tables provided by the components.
Securing Apache Flink jobs
Submitting Flink jobs in a secure environment requires every security parameter for authentication, authorization and other connector related security settings. You should prepare your keystore and keytab files for Flink and for also the chosen connector component.
Using EncryptTool for Flink properties
Cloudera Streaming Analytics offers EncryptTool to further protect your user information and configurations when communicating with Flink using the command line. After generating a master key to the user, you need to manually encrypt the parameters and Flink automatically decrypts the protected values. You also must enable EncryptTool protection in the configuration file for Flink.

© 2019–2023 by Cloudera, Inc. All rights reserved.

This site uses cookies and related technologies, as described in our privacy policy, for purposes that may include site operation, analytics, enhanced user experience, or advertising. You may choose to consent to our use of these technologies, or

1.14.0
1.13.3
1.13.2
1.13.1
1.13.0
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.0
1.8.0
1.7.0
1.6
1.5
1.4
1. 1.4.1
2. 1.4.0
1.3.0
1.2.0
1.1.0