Github user rvesse commented on the issue: https://github.com/apache/spark/pull/21669 @vanzin I think in the current implementation of this PR the Kerberos login is happening inside the driver pod which is running inside the K8S cluster. The old design from the Spark on K8S fork did the login on the submission client and then simply distributed the delegation tokens from there. Something closer to the old design with the login happening in the submission client would be simpler and have less gotchas.
--- --------------------------------------------------------------------- To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org For additional commands, e-mail: reviews-h...@spark.apache.org