pan3793 commented on code in PR #48199: URL: https://github.com/apache/spark/pull/48199#discussion_r1770711368
########## docs/security.md: ########## @@ -947,7 +947,7 @@ mechanism (see `java.util.ServiceLoader`). Implementations of `org.apache.spark.security.HadoopDelegationTokenProvider` can be made available to Spark by listing their names in the corresponding file in the jar's `META-INF/services` directory. -Delegation token support is currently only supported in YARN mode. Consult the +Delegation token support is currently only supported in YARN and Kubernetes mode. Consult the deployment-specific page for more information. The following options provides finer-grained control for this feature: Review Comment: @viirya DT renewal exclusion is another feature that is only supported by YARN. In YARN mode, the RM could take responsibility for the token renewal, in K8s > there isn't a definition of what "external renewal service" is anywhere ref SPARK-25825 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
