[Unmerge][KYUUBI apache#6368] Support impersonation mode for flink sq…

…l engine
beryllw · May 7, 2024 · dcee909 · dcee909
1 parent e9ac30b
commit dcee909
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/kyuubi-server/src/main/scala/org/apache/kyuubi/engine/flink/FlinkProcessBuilder.scala b/kyuubi-server/src/main/scala/org/apache/kyuubi/engine/flink/FlinkProcessBuilder.scala
@@ -61,10 +61,12 @@ class FlinkProcessBuilder(
 
   override protected def mainClass: String = "org.apache.kyuubi.engine.flink.FlinkSQLEngine"
 
-  override def env: Map[String, String] = conf.getEnvs +
-    ("FLINK_CONF_DIR" -> conf.getEnvs.getOrElse(
-      "FLINK_CONF_DIR",
-      s"$flinkHome${File.separator}conf"))
+  override def env: Map[String, String] = conf.getEnvs ++
+    Map(
+      "FLINK_CONF_DIR" -> conf.getEnvs.getOrElse(
+        "FLINK_CONF_DIR",
+        s"$flinkHome${File.separator}conf"),
+      FLINK_PROXY_USER_KEY -> proxyUser)
 
   override def clusterManager(): Option[String] = {
     executionTarget match {
@@ -118,7 +120,7 @@ class FlinkProcessBuilder(
         buffer += s"-Dyarn.application.name=${conf.getOption(APP_KEY).get}"
         buffer += s"-Dyarn.tags=${conf.getOption(YARN_TAG_KEY).get}"
         buffer += "-Dcontainerized.master.env.FLINK_CONF_DIR=."
-
+        buffer += "-Dsecurity.delegation.tokens.enabled=false"
         hiveConfDirOpt.foreach { _ =>
           buffer += "-Dcontainerized.master.env.HIVE_CONF_DIR=."
         }