When I Use a Newly Created Flink User to Submit Tasks, Why Does the Task Submission Fail and a Message Indicating Insufficient Permission on ZooKeeper Directory Is Displayed?

Question

When I use a newly-created Flink user to submit tasks, the task submission fails because of insufficient permission on the ZooKeeper directory. The error message in the log is as follows:

NoAuth for /flink_base/flink/application_1499222480199_0013

Answer

1. Check whether the permission on the /flink_base directory in ZooKeeper is 'world,'anyone: cdrwa; If no, change the permission on the /flink_base directory to'world,'anyone: cdrwa and go to step 2. If yes, go to step 2.
2. In the configuration file of Flink, the default value of high-availability.zookeeper.client.acl is creator, indicating that only the creator of the directory has permission on it. The user created later has no access to the /flink_base/flink directory in ZooKeeper because only the user created earlier has permission on it.

   To solve the problem, perform the following operation as the newly-created user:

   1. Check the configuration file conf/flink-conf.yaml on the client.
   2. Modify the parameter high-availability.zookeeper.path.root to the corresponding ZooKeeper directory, for example, /flink2.
   3. Submit tasks again.