Hello folks, I am testing rolling ugprade in Ambari trunk code and I noticed that for rolling upgrade, update kerberos descriptors step is after Zookeeper, Ranger, Ranger KMS and Kafka. For rolling downgrade, update Kerberos descriptors step happens at the end of the entire downgrade just before the finalize downgrade step.
I thought updating Kerberos descriptors should have happened before starting components. For example, express upgrade/downgrade runs that step before starting core and high level components. Are there any particular reasons that RU runs Kerberos descriptor update step the way it does ? Thanks. Di