GitHub user sohurdc added a comment to the discussion: Kyuubi, Kerberos, and Ranger yarn-cluster mode policy.download.auth.users must be *
Kyuubi, Kerberos, and Ranger works well with spark yarn-client mode . But work with spark yarn-cluster mode when Spark Driver tries to fetch policies, I has problem above. My ranger-spark-security.xml <configuration> <property> <name>ranger.plugin.spark.policy.rest.url</name> <value>http://xxx.com:6081</value> </property> <property> <name>ranger.plugin.spark.service.name</name> <value>hadoop3_spark</value> </property> <property> <name>ranger.plugin.spark.policy.cache.dir</name> <value>/tmp/ranger/spark</value> </property> <property> <name>ranger.plugin.spark.policy.pollIntervalMs</name> <value>30000</value> </property> <property> <name>ranger.plugin.spark.policy.source.impl</name> <value>org.apache.ranger.admin.client.RangerAdminRESTClient</value> </property> <property> <name>ranger.plugin.spark.enable.implicit.userstore.enricher</name> <value>true</value> </property> <property> <name>ranger.plugin.hive.policy.cache.dir</name> <value>/tmp/ranger/hive</value> </property> </configuration> ~ GitHub link: https://github.com/apache/kyuubi/discussions/7128#discussioncomment-13929604 ---- This is an automatically sent email for notifications@kyuubi.apache.org. To unsubscribe, please send an email to: notifications-unsubscr...@kyuubi.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: notifications-unsubscr...@kyuubi.apache.org For additional commands, e-mail: notifications-h...@kyuubi.apache.org