zahed1994 opened a new pull request, #58125: URL: https://github.com/apache/spark/pull/58125
### What changes were proposed in this pull request? This PR adds a warning log in `DriverKubernetesCredentialsFeatureStep` when client credentials (such as OAuth token, client cert/key, or CA cert) are provided and cause Spark to skip configuring the driver service account on the pod. The log message names the service account, lists which credential settings were passed, and suggests using `spark.kubernetes.authenticate.driver.mounted.*` if the user needs both. ### Why are the changes needed? Currently, `spark.kubernetes.authenticate.driver.serviceAccountName` is silently ignored when client credentials are set. For example, setting `caCertFile` to trust a custom CA drops the service account without any warning, causing the driver pod to fall back to the default service account (which often lacks permissions to launch executors). Adding a warning lets users know why their service account was not set without introducing breaking config changes. ### Does this PR introduce _any_ user-facing change? Yes, a warning message is logged when client credentials drop the configured driver service account. ### How was this patch tested? Added a unit test in `DriverKubernetesCredentialsFeatureStepSuite`. ### Was this patch authored or co-authored using generative AI tooling? No. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
