[ https://issues.apache.org/jira/browse/SPARK-25825?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Apache Spark reassigned SPARK-25825: ------------------------------------ Assignee: (was: Apache Spark) > Kerberos Support for Long Running Jobs in Kubernetes > ----------------------------------------------------- > > Key: SPARK-25825 > URL: https://issues.apache.org/jira/browse/SPARK-25825 > Project: Spark > Issue Type: New Feature > Components: Kubernetes > Affects Versions: 3.0.0 > Reporter: Ilan Filonenko > Priority: Major > > When provided with a --keytab and --principal combination, there is an > expectation that Kubernetes would leverage the Driver to spin up a renewal > thread to handle token renewal. However, in the case that a --keytab and > --principal are not provided and instead a secretName and secretItemKey is > provided, there should be an option to specify a config that specifies that a > external renewal service exists. The driver should, therefore, be responsible > for discovering changes to the secret and send the updated token data to the > executor with the UpdateDelegationTokens message. Thereby enabling token > renewal given just a secret in addition to the traditional use-case via > --keytab and --principal -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org