You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/08/21 02:41:00 UTC

[jira] [Updated] (SPARK-58926) Driver pod SPARK_USER should be the proxy user, not the submitter

     [ https://issues.apache.org/jira/browse/SPARK-58926?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated SPARK-58926:
-----------------------------------
    Labels: pull-request-available  (was: )

> Driver pod SPARK_USER should be the proxy user, not the submitter
> -----------------------------------------------------------------
>
>                 Key: SPARK-58926
>                 URL: https://issues.apache.org/jira/browse/SPARK-58926
>             Project: Spark
>          Issue Type: Bug
>          Components: Kubernetes
>    Affects Versions: 4.2.0
>            Reporter: Chandni Singh
>            Priority: Major
>              Labels: pull-request-available
>
> When a Spark app is submitted on Kubernetes with --proxy-user alice, the driver pod's SPARK_USER env var is set to the submitter (e.g. spark), not alice.
> Anything in the driver JVM that reads SPARK_USER sees the wrong identity. That includes SparkContext.sparkUser (event log ownership, UI attribution) and Spark UI view/modify ACLs (SecurityManager). External authz systems (Ranger, custom gRPC interceptors) that resolve identity through SPARK_USER inherit the same wrong value.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org