Github user rvesse commented on the issue:

    https://github.com/apache/spark/pull/21669
  
    @vanzin I think in the current implementation of this PR the Kerberos login 
is happening inside the driver pod which is running inside the K8S cluster.
    
    The old design from the Spark on K8S fork did the login on the submission 
client and then simply distributed the delegation tokens from there.
    
    Something closer to the old design with the login happening in the 
submission client would be simpler and have less gotchas.


---

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org

Reply via email to