security.ssl.algorithms |
"TLS_RSA_WITH_AES_128_CBC_SHA" |
The comma separated list of standard SSL algorithms to be supported. Read more here |
security.ssl.internal.enabled |
false |
Turns on SSL for internal network communication. Optionally, specific components may override this through their own settings (rpc, data transport, REST, etc). |
security.ssl.internal.key-password |
(none) |
The secret to decrypt the key in the keystore for Flink's internal endpoints (rpc, data transport, blob server). |
security.ssl.internal.keystore |
(none) |
The Java keystore file with SSL Key and Certificate, to be used Flink's internal endpoints (rpc, data transport, blob server). |
security.ssl.internal.keystore-password |
(none) |
The secret to decrypt the keystore file for Flink's for Flink's internal endpoints (rpc, data transport, blob server). |
security.ssl.internal.truststore |
(none) |
The truststore file containing the public CA certificates to verify the peer for Flink's internal endpoints (rpc, data transport, blob server). |
security.ssl.internal.truststore-password |
(none) |
The password to decrypt the truststore for Flink's internal endpoints (rpc, data transport, blob server). |
security.ssl.key-password |
(none) |
The secret to decrypt the server key in the keystore. |
security.ssl.keystore |
(none) |
The Java keystore file to be used by the flink endpoint for its SSL Key and Certificate. |
security.ssl.keystore-password |
(none) |
The secret to decrypt the keystore file. |
security.ssl.protocol |
"TLSv1.2" |
The SSL protocol version to be supported for the ssl transport. Note that it doesn’t support comma separated list. |
security.ssl.rest.enabled |
false |
Turns on SSL for external communication via the REST endpoints. |
security.ssl.rest.key-password |
(none) |
The secret to decrypt the key in the keystore for Flink's external REST endpoints. |
security.ssl.rest.keystore |
(none) |
The Java keystore file with SSL Key and Certificate, to be used Flink's external REST endpoints. |
security.ssl.rest.keystore-password |
(none) |
The secret to decrypt the keystore file for Flink's for Flink's external REST endpoints. |
security.ssl.rest.truststore |
(none) |
The truststore file containing the public CA certificates to verify the peer for Flink's external REST endpoints. |
security.ssl.rest.truststore-password |
(none) |
The password to decrypt the truststore for Flink's external REST endpoints. |
security.ssl.truststore |
(none) |
The truststore file containing the public CA certificates to be used by flink endpoints to verify the peer’s certificate. |
security.ssl.truststore-password |
(none) |
The secret to decrypt the truststore. |
security.ssl.verify-hostname |
true |
Flag to enable peer’s hostname verification during ssl handshake. |