On Mon, Jun 22, 2026 at 8:07 PM Cheng Pan <[email protected]> wrote:
> In addition, the Spark DT framework does not work correctly in Java 25 > (especially Spark on K8s mode) due JDK 22+ Subject propagation change. > HADOOP-19668[1] partially solves the issue but does not fully meet Spark > requirements, I proposed a simple approach HADOOP-19906[2][3] as an > alternative, hoping to get reviews by folks who know UGI stuff well. > > [1] https://issues.apache.org/jira/browse/HADOOP-19668 > [2] https://issues.apache.org/jira/browse/HADOOP-19906 > [3] https://github.com/apache/hadoop/pull/8522 > > Thanks, > Cheng Pan > > > Yeah, this is a problem, and makes this SPIP even more relevant. The DirectProviderPath proposed in this SPIP does not go through Subject.doAs() or UserGroupInformation.doAs() and will be unaffected. The existing Kerberos path will have to be updated.
