[
https://issues.apache.org/jira/browse/YUNIKORN-1307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17609814#comment-17609814
]
Wilfred Spiegelenburg commented on YUNIKORN-1307:
-------------------------------------------------
Yes, that case is handled. I do not know the tool tuber but livy I do know.
It is handled via BYPASS_AUTH setting. When the value is set to '{_}true'{_}
and you add have EXTERNAL_USERS and or EXTERNAL_GROUPS defined you can specify
the annotation on the pod. The user the tool uses to submit the job must be in
the allowed user or group list. That means you can still submit as one user
with the real user in the annotations.
Not sure if Livy supports setting the annotations out of the box. K8s support
is not a part of any official Livy release either, so I assume you build from
source and should be able to update that code.
> Create design document
> ----------------------
>
> Key: YUNIKORN-1307
> URL: https://issues.apache.org/jira/browse/YUNIKORN-1307
> Project: Apache YuniKorn
> Issue Type: Sub-task
> Reporter: Peter Bacsko
> Assignee: Wilfred Spiegelenburg
> Priority: Major
>
> Create a design document for enhanced user handling and add it to the
> documentation when discussion is finished
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
