All Products
Search

This Product

    Realtime Compute for Apache Flink:Register a Kerberized Hive cluster

    Document Center

    Realtime Compute for Apache Flink:Register a Kerberized Hive cluster

    Last Updated:Mar 26, 2026

    Register a Kerberized Hive cluster in a namespace so that Flink jobs can authenticate to and access your Kerberized Hive data.

    Prerequisites

    Before you begin, make sure you have:

    • A Kerberized Hive cluster running on Hadoop 2.x or Hadoop 3.x

    • The krb5.conf file for your Kerberos environment

    • A Kerberos principal and the corresponding keytab file

    Hadoop 2.x support requires Ververica Runtime (VVR) 8.0.7 or later.

    Usage notes

    • Multiple Kerberized Hive clusters can be registered in a single namespace.

    • Each registered cluster can have multiple Kerberos principals and keytab files.

    • Each Flink job supports only one Kerberos principal per cluster.

    • Session clusters do not support accessing Kerberized Hive clusters. Use deployments instead.

    Register a Kerberized Hive cluster

    1. Log on to the Realtime Compute for Apache Flink console.

    2. Find the target workspace and click Console in the Actions column.

    3. In the left-side navigation pane, choose Security > Security.

    4. On the Hive Kerberos tab, click Add Kerberos.

    5. In the Add Kerberos dialog box, configure the following parameters: To get the configuration files, see Basic operations on Kerberos.

      Parameter Description Required
      Kerberos Name A display name for the Kerberized Hive cluster in this namespace. Yes
      Kerberos Krb5.conf Upload your krb5.conf file. This file specifies the connection mode, security parameters, and component locations for your Kerberos environment. Yes
      principal The Kerberos principal name. Yes
      Kerberos Keytab Upload the keytab file for the principal above. A keytab stores Kerberos principal keys and lets services authenticate without a password. Yes

    6. Click OK.

    The cluster is now registered in the namespace and available to Flink jobs.

    Add principals

    After registering a cluster, you can add more principals to it—for example, to support different service accounts.

    1. Find the target cluster and click Add in the Actions column.

    2. In the Add Kerberos dialog box, enter a principal name and upload the corresponding keytab file.

      11

    3. Click the image icon to confirm the newly added principal appears in the list.

      22

    Delete a cluster registration

    Warning

    Deleting a cluster registration removes it from the namespace. All Flink jobs in this namespace that use this cluster's Kerberos configuration will fail immediately. Perform this operation with caution.

    To delete a registration, find the target cluster and click Delete in the Actions column.

    What's next