Kousuke Saruta created SPARK-57901:
--------------------------------------
Summary: Add documentation about OIDC Credential Propagation
Key: SPARK-57901
URL: https://issues.apache.org/jira/browse/SPARK-57901
Project: Spark
Issue Type: Sub-task
Components: Documentation
Affects Versions: 4.3.0
Reporter: Kousuke Saruta
This sub-task is part of the umbrella
[SPARK-57703|https://issues.apache.org/jira/browse/SPARK-57703] (OIDC
Credential Propagation).
h2. Problem
Users need documentation to understand how to configure and use OIDC credential
propagation.
h2. Goal
Add user-facing documentation covering configuration, security model, and usage
examples.
h2. Scope
* {{docs/security.md}}: overview of OIDC credential propagation, security model
(raw token stays on driver, delegated credentials only), TLS recommendations
* {{docs/running-on-kubernetes.md}}: OIDC section with configuration examples
for workload-level SA tokens and per-user identity tokens (including Kubernetes
Secret mount examples)
* {{docs/configuration.md}}: all new {{spark.security.credentials.*}}
configuration keys with descriptions and defaults
h2. Acceptance criteria
* Documentation builds without errors.
* All configuration keys are documented with type, default, and description.
* At least two complete configuration examples: workload-level SA token and
per-user identity token.
* Security model (raw token not sent to executors) is clearly explained.
Reference: [SPIP design
document|https://docs.google.com/document/d/1usJKncCPMiyFUg7aIdpZ0HQsklXIHow_sU_6dfFMjN0/edit].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
