DSE 5.1 Resource Manager Part 2 – Process Security

In DataStax Enterprise (DSE) 5.1, the RunAs runner feature allows Spark application components to be run on behalf of a given OS user, improving security and process separation. This is achieved by running executors and drivers as different system users, preventing access to DSE data and configuration files. The RunAs runner uses sudo to run Spark applications as specific OS users and manages slot users independently for each DSE instance. To use the RunAs runner, administrators need to prepare slot users in the OS and configure settings in dse.yaml. This feature enhances security by ensuring that only authorized processes can access sensitive data and resources within a DSE cluster.