When I Use the Newly-Created Flink User to Submit Tasks, Why Does the Task Submission Fail and a Message Indicating Insufficient Permission on ZooKeeper Directory Is Displayed?

Issue

When I use a newly-created Flink user to submit tasks, the task submission fails because of insufficient permission on the ZooKeeper directory. The error message in the log is as follows:

NoAuth for /flink/application_1499222480199_0013

Answer

In the configuration file of Flink, the default value of high-availability.zookeeper.client.acl is creator, indicating that only the creator of the directory has permission on it. The user created later has no access to the /flink directory in ZooKeeper because only the user created earlier has permission on it.

To solve the problem, perform the following operation as the newly-created user:

1. Check the configuration file conf/flink-conf.yaml on the client.
2. Modify the parameter high-availability.zookeeper.path.root to the corresponding ZooKeeper directory, for example, /flink2.
3. Submit the task again.