[
https://issues.apache.org/jira/browse/YUNIKORN-966?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17722645#comment-17722645
]
Wilfred Spiegelenburg commented on YUNIKORN-966:
------------------------------------------------
The proxy user is the user that is used on the hadoop layer to change from the
user that authenticated to an impersonated user (SPARK-25355).
As part of the application management layer we already have an informer for the
operator object in the k8shim itself. We removed the add from the event handler
as it caused issues in the way it was implemented.
If we do use this "proxyUser" we need to integrate this into the admission
controller as we might not allow override of the user. Closing the existing PR
for now as we need to integrate this correctly and not create a bypass for the
auth.
> Retrieve the username from the SparkApp CRD
> -------------------------------------------
>
> Key: YUNIKORN-966
> URL: https://issues.apache.org/jira/browse/YUNIKORN-966
> Project: Apache YuniKorn
> Issue Type: Sub-task
> Components: shim - kubernetes
> Reporter: Chaoran Yu
> Assignee: Ted Lin
> Priority: Minor
> Labels: pull-request-available
>
> Currently the shim only looks at the pods to get the value of the label
> yunikorn.apache.org/username. When the Spark operator plugin is enabled, we
> should look at the SparkApp CRD for the label.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
