> On 4 Nov 2016, at 06:41, blazespinnaker <blazespinna...@gmail.com> wrote: > > Is there a good method / discussion / documentation on how to sandbox a spark > executor? Assume the code is untrusted and you don't want it to be able to > make un validated network connections or do unvalidated alluxio/hdfs/file
use Kerberos to auth HDFS connections, HBase, Hive. When enabled spark processes (all yarn processes) will run as different users in the cluster for isolation there too. no easy way to monitor/block general outbound network connections though. > io. > > > > > -- > View this message in context: > http://apache-spark-user-list.1001560.n3.nabble.com/sanboxing-spark-executors-tp28014.html > Sent from the Apache Spark User List mailing list archive at Nabble.com. > > --------------------------------------------------------------------- > To unsubscribe e-mail: user-unsubscr...@spark.apache.org > > --------------------------------------------------------------------- To unsubscribe e-mail: user-unsubscr...@spark.apache.org
