Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-19588

Allow putting keytab file to HDFS location specified in spark.yarn.keytab

    XMLWordPrintableJSON

    Details

      Description

      As a workaround for SPARK-19038 tried putting keytab in user's home directory in HDFS but this fails with

      Exception in thread "main" org.apache.spark.SparkException: Keytab file: hdfs:///user/svc_odiprd/.kt does not exist
              at org.apache.spark.deploy.SparkSubmit$.prepareSubmitEnvironment(SparkSubmit.scala:555)
              at org.apache.spark.deploy.SparkSubmit$.submit(SparkSubmit.scala:158)
              at org.apache.spark.deploy.SparkSubmit$.main(SparkSubmit.scala:124)
              at org.apache.spark.deploy.SparkSubmit.main(SparkSubmit.scala)
      

      This is yarn-client mode, so driver probably can't see HDFS while submitting a job; although I suspect it doesn't not only with yarn-client.

      Would be great to support reading keytab for kerberos ticket renewals directly from HDFS.

      We think that in some scenarios it's more secure than referencing a keytab from a local fs on a client machine that does a spark-submit.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                Tagar Ruslan Dautkhanov
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: