dev/docker/kerberos-hive/hdfs-site.xml

<configuration>
  <property>
    <name>dfs.replication</name>
    <value>1</value>
  </property>

  <property>
    <name>dfs.webhdfs.enabled</name>
    <value>true</value>
  </property>

  <property>
    <name>dfs.permissions.superusergroup</name>
    <value>hdfs</value>
  </property>

  <property>
    <name>dfs.block.access.token.enable</name>
    <value>true</value>
  </property>

  <property>
    <name>dfs.namenode.kerberos.principal</name>
    <value>hdfs/mockhost@HADOOPKRB</value>
  </property>
  <property>
    <name>dfs.namenode.keytab.file</name>
    <value>/hdfs.keytab</value>
  </property>
  <property>
    <name>dfs.namenode.kerberos.internal.spnego.principal</name>
    <value>HTTP/mockhost@HADOOPKRB</value>
  </property>
  <property>
    <name>dfs.web.authentication.kerberos.keytab</name>
    <value>/hdfs.keytab</value>
  </property>
  <property>
    <name>dfs.web.authentication.kerberos.principal</name>
    <value>HTTP/mockhost@HADOOPKRB</value>
  </property>

  <property>
    <name>dfs.datanode.kerberos.principal</name>
    <value>hdfs/mockhost@HADOOPKRB</value>
  </property>
  <property>
    <name>dfs.datanode.keytab.file</name>
    <value>/hdfs.keytab</value>
  </property>
  <property>
    <name>dfs.datanode.address</name>
    <value>0.0.0.0:578</value>
  </property>
  <property>
    <name>dfs.datanode.http.address</name>
    <value>0.0.0.0:579</value>
  </property>
  <property>
    <name>ignore.secure.ports.for.testing</name>
    <value>true</value>
  </property>
</configuration>