You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@spark.apache.org by "Dongjoon Hyun (Jira)" <ji...@apache.org> on 2020/09/26 23:35:00 UTC

[jira] [Reopened] (SPARK-32235) Kubernetes Configuration to set Service Account to Executors

     [ https://issues.apache.org/jira/browse/SPARK-32235?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dongjoon Hyun reopened SPARK-32235:
-----------------------------------

> Kubernetes Configuration to set Service Account to Executors
> ------------------------------------------------------------
>
>                 Key: SPARK-32235
>                 URL: https://issues.apache.org/jira/browse/SPARK-32235
>             Project: Spark
>          Issue Type: Improvement
>          Components: Kubernetes
>    Affects Versions: 3.0.0
>            Reporter: Pedro Rossi
>            Priority: Minor
>
> Some cloud providers use Service Accounts to provide resource authorization (one example is described here [https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/)] and for this we need to be able to set Service Accounts to the executors.
> My idea for development of this feature would be to have a configuration like "spark.kubernetes.authenticate.executor.serviceAccountName" in order to set the executors Service Account, this way it could be possible to allow only certain accesses to the driver and others to the executors or the same access (user's choice).
> I am creating this issue so the maintainers can write opinions first, but I intend to create a pull request to address this issue also.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org