ashokkumarrathore opened a new issue, #461:
URL: https://github.com/apache/incubator-livy/issues/461

   In a multi tenant Kubernetes cluster, it will not always be the case that 
livy service account has access to all namespaces. Since we look for job in all 
namespaces, it fails if the permission is not there for some namespace. 
   
   Ideally we should only look for job in the namespace it was submitted to. 
Relevant code is here, i think : 
https://github.com/apache/incubator-livy/blob/1f6bd7ab55db3e5b08ff133d554b32db83a23890/server/src/main/scala/org/apache/livy/utils/SparkKubernetesApp.scala#L446
   Also this, 
   
https://github.com/apache/incubator-livy/blob/1f6bd7ab55db3e5b08ff133d554b32db83a23890/server/src/main/scala/org/apache/livy/utils/SparkKubernetesApp.scala#L689


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to