[
https://issues.apache.org/jira/browse/SPARK-32235?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dongjoon Hyun updated SPARK-32235:
----------------------------------
Parent: SPARK-33005
Issue Type: Sub-task (was: Improvement)
> Kubernetes Configuration to set Service Account to Executors
> ------------------------------------------------------------
>
> Key: SPARK-32235
> URL: https://issues.apache.org/jira/browse/SPARK-32235
> Project: Spark
> Issue Type: Sub-task
> Components: Kubernetes
> Affects Versions: 3.0.0
> Reporter: Pedro Rossi
> Priority: Minor
>
> Some cloud providers use Service Accounts to provide resource authorization
> (one example is described here
> [https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/)]
> and for this we need to be able to set Service Accounts to the executors.
> My idea for development of this feature would be to have a configuration like
> "spark.kubernetes.authenticate.executor.serviceAccountName" in order to set
> the executors Service Account, this way it could be possible to allow only
> certain accesses to the driver and others to the executors or the same access
> (user's choice).
> I am creating this issue so the maintainers can write opinions first, but I
> intend to create a pull request to address this issue also.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
