Github user vanzin commented on the issue:

    https://github.com/apache/spark/pull/23174
  
    > via a mounted file
    > Also the user should be able to specify their own mounted file
    
    The point is that the user shouldn't need to set this at all. You enable 
auth, Spark takes care of it. There's no point in specifying a pre-defined file 
with the secret - in fact that makes things *less* secure, because you'd be 
reusing the secret in different apps.
    
    > Some users would prefer to avoid propagating sensitive information via 
environment variables
    
    Why? And how are mounted files better?


---

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org

Reply via email to