erikerlandson commented on issue #24748: [SPARK-27872][K8s] Fix executor service account inconsistency URL: https://github.com/apache/spark/pull/24748#issuecomment-498407528 The proposed behavior of "default executor SA to the driver SA" and default driver SA to `default` is also reasonable. My earlier concern was minimal permissions to executors, however I don't think it adds much vulnerability surface, since executors will not by default have more premissions than the driver, and could only have *more* if some such SA is deliberately made available to the user.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
