Github user liyinan926 commented on a diff in the pull request:
https://github.com/apache/spark/pull/21748#discussion_r202754673
--- Diff: docs/running-on-kubernetes.md ---
@@ -486,7 +516,48 @@ specific to Spark on Kubernetes.
<td>
Service account that is used when running the driver pod. The driver
pod uses this service account when requesting
executor pods from the API server. Note that this cannot be specified
alongside a CA cert file, client key file,
- client cert file, and/or OAuth token.
+ client cert file, and/or OAuth token. In client mode, use
<code>spark.kubernetes.authenticate.serviceAccountName</code> instead.
+ </td>
+</tr>
+<tr>
+ <td><code>spark.kubernetes.authenticate.caCertFile</code></td>
+ <td>(none)</td>
+ <td>
+ In client mode, path to the CA cert file for connecting to the
Kubernetes API server over TLS when
+ requesting executors. Specify this as a path as opposed to a URI (i.e.
do not provide a scheme).
+ </td>
+</tr>
+<tr>
+ <td><code>spark.kubernetes.authenticate.clientKeyFile</code></td>
+ <td>(none)</td>
+ <td>
+ In client mode, path to the client key file for authenticating against
the Kubernetes API server
+ when requesting executors. Specify this as a path as opposed to a URI
(i.e. do not provide a scheme).
+ </td>
+</tr>
+<tr>
+ <td><code>spark.kubernetes.authenticate.clientCertFile</code></td>
+ <td>(none)</td>
+ <td>
+ In client mode, path to the client cert file for authenticating
against the Kubernetes API server
+ when requesting executors. Specify this as a path as opposed to a URI
(i.e. do not provide a scheme).
+ </td>
+</tr>
+<tr>
+ <td><code>spark.kubernetes.authenticate.oauthToken</code></td>
+ <td>(none)</td>
+ <td>
+ In client mode, the OAuth token to use when authenticating against the
Kubernetes API server when
+ requesting executors. Note that unlike the other authentication
options, this must be the exact string value of
+ the token to use for the authentication.
+ </td>
+</tr>
+<tr>
+ <td><code>spark.kubernetes.authenticate.oauthTokenFile</code></td>
+ <td>(none)</td>
+ <td>
+ In client mode, path to the file containing the OAuth token to use
when authenticating against the Kubernetes API
+ server from the driver pod when requesting executors.
--- End diff --
Delete `from the driver pod` as there might not be a driver pod.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
