This is a documentation enhancement request as multiple customers are reporting the same issue.

Issue description:

When user is trying to use Script Action on a domain joined cluster (ESP), it fails with the following exception:

GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)

Kindly please note that this is a known limitation where Script actions cannot be in ADLS; Ambari cannot download the script action locally to run this. Instead, please put the script action in a blob store with a SAS key and use that as the script URL.

I am not sure if we have a work item for this limitation, but at least, we can mention it in documentation for more clarity.