turboFei commented on issue #7511: URL: https://github.com/apache/kyuubi/issues/7511#issuecomment-5446702801
Thanks, this is a useful clarification. The plus model looks sufficient for USER-level affinity, so I agree that owner-label propagation should be handled in the gateway/discovery integration rather than added as a separate engine API.\n\nFor the remaining questions, my current choices are:\n\n1. Include in the initial slice. Long-running and reconnectable executions are important for Spark Connect clients, and the gateway should preserve the RPC semantics from the beginning.\n3. Keep as a top-level module. It is a server-side protocol frontend with its own dependency/profile boundary, and this keeps the existing area focused on opt-in server extensions.\n4. Reuse the authenticated Kyuubi principal for downstream authorization. The bearer token should be resolved by the existing chain; must not override that identity, and the resulting principal should flow through the existing Ranger/HMS authorization path.\n\nI’m also fine with the per-engine token via and no token fil e for the first slice. Please start on the engine-side tasks, and bring any compatibility details for Spark 3.5/4.0 in the PR. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
