sarutak commented on code in PR #58737:
URL: https://github.com/apache/spark/pull/58737#discussion_r3992763375


##########
core/src/main/scala/org/apache/spark/deploy/security/UserCredentialManager.scala:
##########
@@ -554,17 +554,14 @@ private[spark] object UserCredentialManager extends 
Logging {
    * raises a clear error prompting explicit configuration.
    *
    * @param sparkConf The Spark configuration to apply properties into. Not 
modified when OIDC
-   *                  credential propagation is disabled or when `isLocal` is 
true.
-   * @param isLocal Whether the application runs in local mode (no scheduler 
backend that starts
-   *                a resolution phase).
+   *                  credential propagation is disabled.
    * @return `Some(loader)` with the [[CredentialProviderLoader]] used, to be 
passed to
    *         [[create]] so the resolution phase reuses the same loader; `None` 
when OIDC is
-   *         disabled or when `isLocal` is true (no loader is allocated in 
those cases).
+   *         disabled (no loader is allocated in that case).
    */
   def applyProviderProperties(
-      sparkConf: SparkConf,
-      isLocal: Boolean): Option[CredentialProviderLoader] = {
-    if (!sparkConf.get(SECURITY_OIDC_ENABLED) || isLocal) {
+      sparkConf: SparkConf): Option[CredentialProviderLoader] = {
+    if (!sparkConf.get(SECURITY_OIDC_ENABLED)) {

Review Comment:
   I've documented it rather than resolving earlier in local mode, since moving 
resolution up would
   diverge local from cluster and break the selection-vs-resolution separation 
(resolution does I/O and
   must stay late).



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to