[ https://issues.apache.org/jira/browse/SPARK-24232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16472551#comment-16472551 ]
Stavros Kontopoulos edited comment on SPARK-24232 at 5/11/18 7:52 PM: ---------------------------------------------------------------------- [~dharmesh.kakadia] I am working on adding something like the following: spark.kubernetes.\{driver,executor}.secrets.envKey.[EnvSecretName]=<ENV_VAR_NAME> spark.kubernetes.\{driver, executor}.secrets.mountKey.[mountSecretName]=<MOUNT_PATH> By default everything starting with prefix `spark.kubernetes.driver.secrets.` is now considered a mount secret. [~liyinan926] sounds ok? was (Author: skonto): [~dharmesh.kakadia] I am working on adding something like the following: spark.kubernetes.driver.secrets.envKey.[EnvSecretName]=<ENV_VAR_NAME> spark.kubernetes.driver.secrets.mountKey.[mountSecretName]=<MOUNT_PATH> By default everything starting with prefix `spark.kubernetes.driver.secrets.` is now considered a mount secret. [~liyinan926] sounds ok? > Allow referring to kubernetes secrets as env variable > ----------------------------------------------------- > > Key: SPARK-24232 > URL: https://issues.apache.org/jira/browse/SPARK-24232 > Project: Spark > Issue Type: New Feature > Components: Kubernetes > Affects Versions: 2.3.0 > Reporter: Dharmesh Kakadia > Priority: Major > > Allow referring to kubernetes secrets in the driver process via environment > variables. This will allow developers to use secretes without leaking them in > the code and at the same time secrets can be decoupled and managed > separately. This can be used to refer to passwords, certificates etc while > talking to other service (jdbc passwords, storage keys etc). > So, at the deployment time, something like > ``spark.kubernetes.driver.secretKeyRef.[EnvName]=<key>`` can be specified > which will make [EnvName].[key] available as an environment variable and in > the code its always referred as env variable [key]. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org