You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@spark.apache.org by "Pedro Rossi (Jira)" <ji...@apache.org> on 2020/07/08 21:36:06 UTC

[jira] [Created] (SPARK-32235) Kubernetes Configuration to set Service Account to Executors

Pedro Rossi created SPARK-32235:
-----------------------------------

             Summary: Kubernetes Configuration to set Service Account to Executors
                 Key: SPARK-32235
                 URL: https://issues.apache.org/jira/browse/SPARK-32235
             Project: Spark
          Issue Type: Improvement
          Components: Kubernetes
    Affects Versions: 3.0.0
            Reporter: Pedro Rossi


Some cloud providers use Service Accounts to provide resource authorization (one example is described here [https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/)] and for this we need to be able to set Service Accounts to the executors.

My idea for development of this feature would be to have a configuration like "spark.kubernetes.authenticate.executor.serviceAccountName" in order to set the executors Service Account, this way it could be possible to allow only certain accesses to the driver and others to the executors or the same access (user's choice)

I am creating this issue so the maintainers can write opinions first, but I intend to create a pull request to address this issue also

{{}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org