GitHub user sohurdc added a comment to the discussion: Kyuubi, Kerberos, and 
Ranger yarn-cluster mode policy.download.auth.users must be *

Kyuubi, Kerberos, and Ranger works well with spark yarn-client mode . But work 
with  spark yarn-cluster mode when  Spark Driver tries to fetch policies, I has 
problem above.
My ranger-spark-security.xml
<configuration>
 <property>
 <name>ranger.plugin.spark.policy.rest.url</name>
 <value>http://xxx.com:6081</value>
 </property>
 <property>
 <name>ranger.plugin.spark.service.name</name>
 <value>hadoop3_spark</value>
 </property>
 <property>
 <name>ranger.plugin.spark.policy.cache.dir</name>
 <value>/tmp/ranger/spark</value>
 </property>
 <property>
 <name>ranger.plugin.spark.policy.pollIntervalMs</name>
 <value>30000</value>
 </property>
 <property>
 <name>ranger.plugin.spark.policy.source.impl</name>
 <value>org.apache.ranger.admin.client.RangerAdminRESTClient</value>
 </property>
 <property>
    <name>ranger.plugin.spark.enable.implicit.userstore.enricher</name>
    <value>true</value>
 </property>
 <property>
    <name>ranger.plugin.hive.policy.cache.dir</name>
    <value>/tmp/ranger/hive</value>
 </property>
</configuration>
~                                 

GitHub link: 
https://github.com/apache/kyuubi/discussions/7128#discussioncomment-13929604

----
This is an automatically sent email for notifications@kyuubi.apache.org.
To unsubscribe, please send an email to: 
notifications-unsubscr...@kyuubi.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@kyuubi.apache.org
For additional commands, e-mail: notifications-h...@kyuubi.apache.org

Reply via email to