GitHub user budde opened a pull request:
https://github.com/apache/spark/pull/16744
[SPARK-19405][STREAMING] Support for cross-account Kinesis reads via STS
- Add dependency on aws-java-sdk-sts
- Replace SerializableAWSCredentials with new SerializableKCLAuthProvider
class
- Make KinesisReceiver take SerializableKCLAuthProvider as argument and
pass credential provider to KCL
- Add new implementations of KinesisUtils.createStream() that take STS
arguments
- Make JavaKinesisStreamSuite test the entire KinesisUtils Java API
## What changes were proposed in this pull request?
* Replace SerializableAWSCredentials with new SerializableKCLAuthProvider
class that takes 5 optional config params for configuring AWS auth and returns
the appropriate credential provider object
* Add new public createStream() APIs for specifying these parameters in
KinesisUtils
## How was this patch tested?
* Manually tested using explicit keypair and instance profile to read data
from Kinesis stream in separate account (difficult to write a test
orchestrating creation and assumption of IAM roles across separate accounts)
* Expanded JavaKinesisStreamSuite to test the entire Java API in
KinesisUtils
## License acknowledgement
This contribution is my original work and that I license the work to the
project under the projectâs open source license.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/budde/spark master
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/spark/pull/16744.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #16744
----
commit 4786cdec136b717b1a933e67b61fe79ce3e3ce1e
Author: Budde <[email protected]>
Date: 2017-01-17T18:21:06Z
[SPARK-19405][STREAMING] Add support to KinesisUtils for cross-account
Kinesis reads via STS
- Add dependency on aws-java-sdk-sts
- Replace SerializableAWSCredentials with new SerializableKCLAuthProvider
class
- Make KinesisReceiver take SerializableKCLAuthProvider as argument and
pass credential provider to KCL
- Add new implementations of KinesisUtils.createStream() that take STS
arguments
- Make JavaKinesisStreamSuite test the entire KinesisUtils Java API
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
