Github user skonto commented on the issue:

    https://github.com/apache/spark/pull/20945
  
    @susanxhuynh @vanzin 
    It seems to me that if SPARK-20982 is fixed then from what I see all secret 
stores I searched provide an http API:
    
https://github.com/kubernetes/kubernetes/blob/09f321c80bfc9bca63a5530b56d7a1a3ba80ba9b/pkg/kubectl/cmd/util/factory_client_access.go#L473
    https://www.vaultproject.io/api/index.html
    https://docs.openshift.org/latest/rest_api/api/v1.Secret.html
    
https://v1-9.docs.kubernetes.io/docs/reference/generated/kubernetes-api/v1.9/#secret-v1-core
    https://docs.mesosphere.com/1.8/administration/secrets/secrets-api/
    
    So generating DTs at the first spark submit and then using an http API 
should be good enough, although all envs like k8s or DC/OS usually have a cli 
utility to do the job.



---

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org

Reply via email to