Pedro Rossi created SPARK-32235:
-----------------------------------
Summary: Kubernetes Configuration to set Service Account to
Executors
Key: SPARK-32235
URL: https://issues.apache.org/jira/browse/SPARK-32235
Project: Spark
Issue Type: Improvement
Components: Kubernetes
Affects Versions: 3.0.0
Reporter: Pedro Rossi
Some cloud providers use Service Accounts to provide resource authorization
(one example is described here
[https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/)]
and for this we need to be able to set Service Accounts to the executors.
My idea for development of this feature would be to have a configuration like
"spark.kubernetes.authenticate.executor.serviceAccountName" in order to set the
executors Service Account, this way it could be possible to allow only certain
accesses to the driver and others to the executors or the same access (user's
choice)
I am creating this issue so the maintainers can write opinions first, but I
intend to create a pull request to address this issue also
{{}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org
