[jira] [Commented] (YUNIKORN-966) Retrieve the username from the SparkApp CRD

["Wilfred Spiegelenburg (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/YUNIKORN-966?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17722645#comment-17722645 ] 

Wilfred Spiegelenburg commented on YUNIKORN-966:
------------------------------------------------

The proxy user is the user that is used on the hadoop layer to change from the user that authenticated to an impersonated user (SPARK-25355).

As part of the application management layer we already have an informer for the operator object in the k8shim itself. We removed the add from the event handler as it caused issues in the way it was implemented.

If we do use this "proxyUser" we need to integrate this into the admission controller as we might not allow override of the user. Closing the existing PR for now as we need to integrate this correctly and not create a bypass for the auth.

> Retrieve the username from the SparkApp CRD
> -------------------------------------------
>
>                 Key: YUNIKORN-966
>                 URL: https://issues.apache.org/jira/browse/YUNIKORN-966
>             Project: Apache YuniKorn
>          Issue Type: Sub-task
>          Components: shim - kubernetes
>            Reporter: Chaoran Yu
>            Assignee: Ted Lin
>            Priority: Minor
>              Labels: pull-request-available
>
> Currently the shim only looks at the pods to get the value of the label yunikorn.apache.org/username. When the Spark operator plugin is enabled, we should look at the SparkApp CRD for the label.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org