Re: [DISCUSS] Improve documentation / tooling around security of Flink

2019-12-17 Thread Robert Metzger
Hey, changes to the network configuration often cause unforeseen trouble, in particular with things like Kubernetes, Docker etc., and the "onboarding experience" might suffer due to this. Updated list: a) Add a check-security.sh script, or a check into the frontend if the JobManager can be reached

Re: [DISCUSS] Improve documentation / tooling around security of Flink

2019-12-15 Thread Konstantin Knauf
Hi Robert, we could also add a warning (or a general "security" section) to the "production readiness checklist" in the documentation. Generally, I like d) in combination with an informative log message. Do you think this would cause a lot of friction? Cheers, Konstantin On Fri, Dec 13, 2019 a

Re: [DISCUSS] Improve documentation / tooling around security of Flink

2019-12-13 Thread Chesnay Schepler
Another proposal that was brought up was to provide a script for generating an SSL certificate with the distribution. On 12/12/2019 17:45, Robert Metzger wrote: Hi all, There was recently a private report to the Flink PMC, as well as publicly [1] about Flink's ability to execute arbitrary code