[jira] [Updated] (SPARK-57786) Add a configuration to control Spark History Server log access

["iBenny (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SPARK-57786?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

iBenny updated SPARK-57786:
---------------------------
    Summary: Add a configuration to control Spark History Server log access  (was: Add a configuration to control Spark History Server process log access)

> Add a configuration to control Spark History Server log access
> --------------------------------------------------------------
>
>                 Key: SPARK-57786
>                 URL: https://issues.apache.org/jira/browse/SPARK-57786
>             Project: Spark
>          Issue Type: Improvement
>          Components: Spark Core
>    Affects Versions: 4.0.0
>            Reporter: iBenny
>            Priority: Major
>
> After SPARK-46903, the Spark History Server process log can be accessed from its home page.
> Server logs may contain sensitive information, so exposing them through the History Server UI by default can be a security risk.
> Add the {{spark.history.ui.log.enable}} configuration, defaulting to {{{}false{}}}. When disabled:
>  * Hide the server log link from the home page.
>  * Do not register the {{/logPage}} handler.
>  * Do not register the raw {{/log}} handler.
> Administrators can explicitly enable log access by setting the configuration to {{{}true{}}}.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org