[
https://issues.apache.org/jira/browse/SPARK-57786?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
iBenny updated SPARK-57786:
---------------------------
Description:
After SPARK-46903, the Spark History Server process log can be accessed from
its home page.
Server logs may contain sensitive information, so exposing them through the
History Server UI by default can be a security risk.
Add the {{spark.history.ui.log.enable}} configuration, defaulting to
{{{}false{}}}. When disabled:
* Hide the server log link from the home page.
* Do not register the {{/logPage}} handler.
* Do not register the raw {{/log}} handler.
Administrators can explicitly enable log access by setting the configuration to
{{{}true{}}}.
> Add a configuration to control Spark History Server process log access
> ----------------------------------------------------------------------
>
> Key: SPARK-57786
> URL: https://issues.apache.org/jira/browse/SPARK-57786
> Project: Spark
> Issue Type: Improvement
> Components: Spark Core
> Affects Versions: 4.0.0
> Reporter: iBenny
> Priority: Major
>
> After SPARK-46903, the Spark History Server process log can be accessed from
> its home page.
> Server logs may contain sensitive information, so exposing them through the
> History Server UI by default can be a security risk.
> Add the {{spark.history.ui.log.enable}} configuration, defaulting to
> {{{}false{}}}. When disabled:
> * Hide the server log link from the home page.
> * Do not register the {{/logPage}} handler.
> * Do not register the raw {{/log}} handler.
> Administrators can explicitly enable log access by setting the configuration
> to {{{}true{}}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
