Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-26895

When running spark 2.3 as a proxy user (--proxy-user), SparkSubmit fails to resolve globs owned by target user

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.3.2, 2.4.0
    • Fix Version/s: 2.3.4, 2.4.4, 3.0.0
    • Component/s: Spark Core
    • Labels:
      None

      Description

      We are resolving globs in SparkSubmit here (by way of prepareSubmitEnvironment) without first going into a doAs:

      https://github.com/apache/spark/blob/6c18d8d8079ac4d2d6dc7539601ab83fc5b51760/core/src/main/scala/org/apache/spark/deploy/SparkSubmit.scala#L143

      Without first entering a doAs, as done here:

      https://github.com/apache/spark/blob/6c18d8d8079ac4d2d6dc7539601ab83fc5b51760/core/src/main/scala/org/apache/spark/deploy/SparkSubmit.scala#L151

      So when running spark-submit with --proxy-user, and for example --archives, it will fail to launch unless the location of the archive is open to the user that executed spark-submit.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                abellina Alessandro Bellina
                Reporter:
                abellina Alessandro Bellina
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: