Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-26895

When running spark 2.3 as a proxy user (--proxy-user), SparkSubmit fails to resolve globs owned by target user

Rank to TopRank to BottomAttach filesAttach ScreenshotBulk Copy AttachmentsBulk Move AttachmentsVotersWatch issueWatchersCreate sub-taskConvert to sub-taskLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 2.3.2, 2.4.0
    • 2.3.4, 2.4.4, 3.0.0
    • Spark Core
    • None

    Description

      We are resolving globs in SparkSubmit here (by way of prepareSubmitEnvironment) without first going into a doAs:

      https://github.com/apache/spark/blob/6c18d8d8079ac4d2d6dc7539601ab83fc5b51760/core/src/main/scala/org/apache/spark/deploy/SparkSubmit.scala#L143

      Without first entering a doAs, as done here:

      https://github.com/apache/spark/blob/6c18d8d8079ac4d2d6dc7539601ab83fc5b51760/core/src/main/scala/org/apache/spark/deploy/SparkSubmit.scala#L151

      So when running spark-submit with --proxy-user, and for example --archives, it will fail to launch unless the location of the archive is open to the user that executed spark-submit.

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            abellina Alessandro Bellina
            abellina Alessandro Bellina
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment