Github user jerryshao commented on the issue: https://github.com/apache/spark/pull/17335 @yaooqinn , You only need one principal (for example principal "f...@example.com") to get authentication from different services, the configurations for hive and NN mentioned above is only for this two services, it is not for user who submits Spark application. For the user who launches Spark application, only `spark.yarn.principal` could represent this user.
--- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. --- --------------------------------------------------------------------- To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org For additional commands, e-mail: reviews-h...@spark.apache.org