In a secure environment, when both HDFS HA and log aggregation are turned on, JavaActionExecutor is not able to call YarnClient#submitApplication since HDFS_DELEGATION_TOKEN is missing.
In those cases we need to get HDFS_DELEGATION_TOKEN from YARN:
- get server principal / YARN renewer via HadoopAccessorService#getServerPrincipal
- get HDFS_DELEGATION_TOKEN via DFSClient#getDelegationToken
- add HDFS_DELEGATION_TOKEN to Credentials