erictcgs commented on issue #22911: [SPARK-25815][k8s] Support kerberos in client mode, keytab-based token renewal. URL: https://github.com/apache/spark/pull/22911#issuecomment-447201076 Great, that commit looks promising - I'll test in the morning. I did have `HADOOP_CONF_DIR` set in the submit environment, had only tried the configmap after it didn't seem to work. Do you suspect this may fix the executors not using the delegation token as well? I couldn't find documentation on how they get signaled to use that for hdfs access, or how to check whether they're trying to - if the dt is supposed to be mapped in as a configmap/secret and there's a command argument/config/env var signaling them to use it, or if there's another channel from the driver to pass the dt and have them use it?
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
