Github user skonto commented on the issue:
https://github.com/apache/spark/pull/20945
@susanxhuynh @vanzin
It seems to me that if SPARK-20982 is fixed then from what I see all secret
stores I searched provide an http API:
https://github.com/kubernetes/kubernetes/blob/09f321c80bfc9bca63a5530b56d7a1a3ba80ba9b/pkg/kubectl/cmd/util/factory_client_access.go#L473
https://www.vaultproject.io/api/index.html
https://docs.openshift.org/latest/rest_api/api/v1.Secret.html
https://v1-9.docs.kubernetes.io/docs/reference/generated/kubernetes-api/v1.9/#secret-v1-core
https://docs.mesosphere.com/1.8/administration/secrets/secrets-api/
So generating DTs at the first spark submit and then using an http API
should be good enough, although all envs like k8s or DC/OS usually have a cli
utility to do the job.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org
